CVE-2023-23575
published 2023-04-11CVE-2023-23575: Improper access control vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker to bypass access restriction and access Network…
PriorityP424medium4.3CVSS 3.1
AVNACLPRLUINSUCLINAN
EPSS
0.69%
48.3th percentile
Improper access control vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker to bypass access restriction and access Network Maintenance page, which may result in obtaining the network information of the product. The affected products and versions are as follows: M2M Gateway with the firmware Ver.3.7.10 and earlier (CPS-MG341-ADSC1-111, CPS-MG341-ADSC1-931, CPS-MG341G-ADSC1-111, CPS-MG341G-ADSC1-930, and CPS-MG341G5-ADSC1-931), M2M Controller Integrated Type with firmware Ver.3.7.6 and earlier versions (CPS-MC341-ADSC1-111, CPS-MC341-ADSC1-931, CPS-MC341-ADSC2-111, CPS-MC341G-ADSC1-110, CPS-MC341Q-ADSC1-111, CPS-MC341-DS1-111, CPS-MC341-DS11-111, CPS-MC341-DS2-911, and CPS-MC341-A1-111), and M2M Controller Configurable Type with firmware Ver.3.8.8 and earlier versions (CPS-MCS341-DS1-111, CPS-MCS341-DS1-131, CPS-MCS341G-DS1-130, CPS-MCS341G5-DS1-130, and CPS-MCS341Q-DS1-131).
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| contec | cps-mc341-a1-111_firmware | <= 3.7.6 | — |
| contec | cps-mc341-adsc1-111_firmware | <= 3.7.6 | — |
| contec | cps-mc341-adsc1-931_firmware | <= 3.7.6 | — |
| contec | cps-mc341-adsc2-111_firmware | <= 3.7.6 | — |
| contec | cps-mc341-ds1-111_firmware | <= 3.7.6 | — |
| contec | cps-mc341-ds11-111_firmware | <= 3.7.6 | — |
| contec | cps-mc341-ds2-911_firmware | <= 3.7.6 | — |
| contec | cps-mc341g-adsc1-110_firmware | <= 3.7.6 | — |
| contec | cps-mc341q-adsc1-111_firmware | <= 3.7.6 | — |
| contec | cps-mcs341-ds1-111_firmware | <= 3.8.8 | — |
| contec | cps-mcs341-ds1-131_firmware | <= 3.8.8 | — |
| contec | cps-mcs341g-ds1-130_firmware | <= 3.8.8 | — |
| contec | cps-mcs341g5-ds1-130_firmware | <= 3.8.8 | — |
| contec | cps-mcs341q-ds1-131_firmware | <= 3.8.8 | — |
| contec | cps-mg341-adsc1-111_firmware | <= 3.7.10 | — |
| contec | cps-mg341-adsc1-931_firmware | <= 3.7.10 | — |
| contec | cps-mg341g-adsc1-111_firmware | <= 3.7.10 | — |
| contec | cps-mg341g-adsc1-930_firmware | <= 3.7.10 | — |
| contec | cps-mg341g5-adsc1-931_firmware | <= 3.7.10 | — |
| contec_co_ltd | conprosys_iot_gateway_products | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://jvn.jp/en/vu/JVNVU96198617/https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_cps_230317_en.pdfhttps://www.contec.com/download/donwload-list/?itemid=a054b3eb-da97-40d0-9598-d7f5ff4239ec#firmwarehttps://www.contec.com/download/donwload-list/?itemid=a1b33f0d-d32b-4549-9741-613cd37d5528#firmwarehttps://www.contec.com/download/donwload-list/?itemid=f832c526-dcf6-4976-85aa-f536c15a8120#firmwarehttps://jvn.jp/en/vu/JVNVU96198617/https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_cps_230317_en.pdfhttps://www.contec.com/download/donwload-list/?itemid=a054b3eb-da97-40d0-9598-d7f5ff4239ec#firmwarehttps://www.contec.com/download/donwload-list/?itemid=a1b33f0d-d32b-4549-9741-613cd37d5528#firmwarehttps://www.contec.com/download/donwload-list/?itemid=f832c526-dcf6-4976-85aa-f536c15a8120#firmware
2023-04-11
Published