CVE-2023-30356
HIGHCVSS 7.5/10EPSS 0.27%
Last modified
CVE-2023-30356 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Missing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows attackers to update the device with crafted firmware. EPSS estimates a 0.27% chance of exploitation in the next 30 days.
Description
Missing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows attackers to update the device with crafted firmware
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Tenda | Cp3 Firmware | 11.10.00.2211041355 |
References
- https://github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_MU.mdThird Party Advisory
- https://github.com/SECloudUNIMORE/ACES/blob/master/Tenda/CP3/tmp_MU.mdThird Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-30356?
Missing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows attackers to update the device with crafted firmware
How severe is CVE-2023-30356?
CVE-2023-30356 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.27% probability of exploitation in the next 30 days.
How do I fix CVE-2023-30356?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-3035A vulnerability has been found in Guangdong Pythagorean OA O…5.4
- CVE-2023-30350FS S3900-24T4S devices allow authenticated attackers with gu…8.8
- CVE-2023-30351Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 …7.5
- CVE-2023-30352Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 …9.8
- CVE-2023-30353Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 …9.8
- CVE-2023-30354Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 …9.8
- CVE-2023-3036An unchecked read in NTP server in github.com/cloudflare/cfn…7.5
- CVE-2023-30362Buffer Overflow vulnerability in coap_send function in libco…7.5
- CVE-2023-30363vConsole v3.15.0 was discovered to contain a prototype pollu…9.8
- CVE-2023-30367Multi-Remote Next Generation Connection Manager (mRemoteNG) …7.5
- CVE-2023-30368Tenda AC5 V15.03.06.28 is vulnerable to Buffer Overflow via …9.8
- CVE-2023-30369Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow.9.8
Are you affected by CVE-2023-30356?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST