CVE-2023-31411
Last modified
CVE-2023-31411 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication. The lack of authentication in the API allows the attacker to potentially compromise the functionality of the EventCam App.. EPSS estimates a 0.90% chance of exploitation in the next 30 days.
Description
A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication. The lack of authentication in the API allows the attacker to potentially compromise the functionality of the EventCam App.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sick | Sick Eventcam App | All versions |
References
- https://sick.com/psirtVendor Advisory
- https://sick.com/psirtVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-31411?
How severe is CVE-2023-31411?
How do I fix CVE-2023-31411?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-31406Due to insufficient input validation, SAP BusinessObjects Bu…6.1
- CVE-2023-31407SAP Business Planning and Consolidation - versions 740, 750,…5.4
- CVE-2023-31408Cleartext Storage of Sensitive Information in SICK FTMg AIR …7.5
- CVE-2023-31409Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENS…7.5
- CVE-2023-3141A use-after-free flaw was found in r592_remove in drivers/me…7.1
- CVE-2023-31410A remote unprivileged attacker can intercept the communicati…7.4
- CVE-2023-31412The LMS5xx uses weak hash generation methods, resulting in t…7.5
- CVE-2023-31413Filebeat versions through 7.17.9 and 8.6.2 have a flaw in ht…3.3
- CVE-2023-31414Kibana versions 8.0.0 through 8.7.0 contain an arbitrary cod…8.8
- CVE-2023-31415Kibana version 8.7.0 contains an arbitrary code execution fl…8.8
- CVE-2023-31416Secret token configuration is never applied when using ECK <…5.3
- CVE-2023-31417Elasticsearch generally filters out sensitive information an…4.4
Are you affected by CVE-2023-31411?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST