Medium severity · published Apr 11, 2023
CVE-2023-23575
Improper access control vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker to bypass access restriction and access Network Maintenance page,…
4.3
CVSS
0.7%
EPSS
No
On KEV
Description
Improper access control vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker to bypass access restriction and access Network Maintenance page, which may result in obtaining the network information of the product. The affected products and versions are as follows: M2M Gateway with the firmware Ver.3.7.10 and earlier (CPS-MG341-ADSC1-111, CPS-MG341-ADSC1-931, CPS-MG341G-ADSC1-111, CPS-MG341G-ADSC1-930, and CPS-MG341G5-ADSC1-931), M2M Controller Integrated Type with firmware Ver.3.7.6 and earlier versions (CPS-MC341-ADSC1-111, CPS-MC341-ADSC1-931, CPS-MC341-ADSC2-111, CPS-MC341G-ADSC1-110, CPS-MC341Q-ADSC1-111, CPS-MC341-DS1-111, CPS-MC341-DS11-111, CPS-MC341-DS2-911, and CPS-MC341-A1-111), and M2M Controller Configurable Type with firmware Ver.3.8.8 and earlier versions (CPS-MCS341-DS1-111, CPS-MCS341-DS1-131, CPS-MCS341G-DS1-130, CPS-MCS341G5-DS1-130, and CPS-MCS341Q-DS1-131).
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 53% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Cps-mc341-a1-111 Firmware · Contec
through 3.7.6 · source: NVD
CF
Cps-mc341-adsc1-111 Firmware · Contec
through 3.7.6 · source: NVD
CF
Cps-mc341-adsc1-931 Firmware · Contec
through 3.7.6 · source: NVD
CF
Cps-mc341-adsc2-111 Firmware · Contec
through 3.7.6 · source: NVD
CF
Cps-mc341-ds1-111 Firmware · Contec
through 3.7.6 · source: NVD
CF
Cps-mc341-ds11-111 Firmware · Contec
through 3.7.6 · source: NVD
CF
Cps-mc341-ds2-911 Firmware · Contec
through 3.7.6 · source: NVD
CF
Cps-mc341g-adsc1-110 Firmware · Contec
through 3.7.6 · source: NVD
CF
Cps-mc341q-adsc1-111 Firmware · Contec
through 3.7.6 · source: NVD
CF
Cps-mcs341-ds1-111 Firmware · Contec
through 3.8.8 · source: NVD
CF
Cps-mcs341-ds1-131 Firmware · Contec
through 3.8.8 · source: NVD
CF
Cps-mcs341g-ds1-130 Firmware · Contec
through 3.8.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-23575
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-23575
Third Party Advisory
https://jvn.jp/en/vu/JVNVU96198617/
Mitigation
https://www.contec.com/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_cps_230317_en.pdf
Product
https://www.contec.com/download/donwload-list/?itemid=a054b3eb-da97-40d0-9598-d7f5ff4239ec#firmware
Product
https://www.contec.com/download/donwload-list/?itemid=a1b33f0d-d32b-4549-9741-613cd37d5528#firmware
Product
https://www.contec.com/download/donwload-list/?itemid=f832c526-dcf6-4976-85aa-f536c15a8120#firmware
More from Cps-mc341-a1-111 Firmware
8.8
CVE-2023-27917
OS command injection vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker who can access Network Maintenance page to execute arbitrary OS…
7.2
CVE-2023-27389
Inadequate encryption strength vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker with an administrative privilege to apply a specially crafted…