Vulnerability · Published Jan 7, 2023 · Assigned by VulDB
CVE-2023-0114Netis Netcore Router Backup param.file.tgz cleartext storage in a file or on disk
Low 3.3
In plain English
A low-severity security flaw in Netcore Router from Netis. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).
Severity (CVSS 3.1)3.3Low
Exploit odds (30 days)0.1%top 96.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A vulnerability was found in Netis Netcore Router. It has been rated as problematic. Affected by this issue is some unknown functionality of the file param.file.tgz of the component Backup Handler. The manipulation leads to cleartext storage in a file or on disk. Local access is required to approach this attack. The identifier of this vulnerability is VDB-217592.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Netis | Netcore Router | n/a |
Weakness: CWE-313 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
References
- https://vuldb.com/?id.217592 vdb-entry, technical-description
- https://vuldb.com/?ctiid.217592 signature