CVE-2023-4818 Vulnerability Details

  /     /     /  

CVE-2023-4818 Metadata Quick Info

CVE Published: 15/01/2024 | CVE Updated: 10/10/2024 | CVE Year: 2023
Source: CERT-PL | Vendor: PAX Technology | Product: A920
Status : PUBLISHED

---

CVE-2023-4818 Description

PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used.  The attacker must have physical USB access to the device in order to exploit this vulnerability.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-74
CWE Name: CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ( Injection )
Source: PAX Technology

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID: CAPEC-176
CAPEC Description: CAPEC-176 Configuration/Environment Manipulation


Source: NVD (National Vulnerability Database).