{"id":"CVE-2023-3453","aliases":["EUVD-2023-44115","GHSA-w3f5-3hvg-x2vg"],"status":"published","title":"ETIC Telecom Insecure Default Initialization of Resource","description":"ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00339,"percentile":0.27473,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1188"],"published":"2023-08-23T21:14:17Z","modified":"2026-06-17T06:14:06Z","products":[{"vendor":"etic telecom","product":"remote access server (ras)"},{"vendor":"etictelecom","product":"remote_access_server_firmware"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-208-01","tags":["x_transferred","Patch","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3453"},{"url":"https://github.com/advisories/GHSA-w3f5-3hvg-x2vg"}],"sources":{"cve":[{"id":"CVE-2023-3453","title":"ETIC Telecom Insecure Default Initialization of Resource","description":"\nETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition.\n\n","status":"published","published":"2023-08-23T21:14:17.553Z","modified":"2024-09-30T19:13:47.408Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-1188"],"updated_at":"2026-11-02T14:35:24.360381Z"}],"euvd":[{"id":"EUVD-2023-44115","description":"\nETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition.\n\n","status":"published","published":"2023-08-23T21:14:17Z","modified":"2024-09-30T19:13:47Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-03T00:28:01.909154Z"}],"ghsa":[{"id":"GHSA-w3f5-3hvg-x2vg","title":"\nETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by...","description":"\nETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition.\n\n","status":"published","published":"2023-08-24T00:30:22Z","modified":"2024-01-06T05:06:11Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","level":"high"}],"cwes":["CWE-1188"],"updated_at":"2026-11-02T14:55:20.878476Z"}],"nvd":[{"id":"CVE-2023-3453","description":"\nETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition.\n\n","status":"published","published":"2023-08-23T22:15:08.93Z","modified":"2026-06-17T06:14:06.273Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","level":"high","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-1188"],"updated_at":"2026-11-02T14:08:25.025396Z"}]}}