CVE-2023-45801

moderate-risk
Published 2023-12-13

Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.This issue affects DVR: from 3.0.0 before 9.9.0.

Do I need to act?

-
0.10% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (18)

At-0402R Firmware
At-0815R Firmware
At-1623R Firmware
At-0402L Firmware
At-0815L Firmware
At-1623L Firmware
At-0402E Firmware
At-0815E Firmware
At-1623E Firmware
At-0402M Firmware
At-0815M Firmware
At-1623M Firmware
At-0413M Firmware
At-0823M Firmware
At-1643M Firmware
At-0413S Firmware
At-0823S Firmware
At-1643S Firmware

Affected Vendors

Nadatel

References (2)

Product http://www.nadatel.com/
Product http://www.nadatel.com/
45
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 0/34 · Minimal
Exposure 19/34 · Moderate