CVE-2023-0808

MEDIUM Year: 2023
CVSS v3 Score
6.8
Medium
CVSS v2 Score
3.7
Low
Weakness Type
CWE-259
View all →

Vulnerability Description

A vulnerability was found in Deye/Revolt/Bosswerk Inverter MW3_15U_5406_1.47/MW3_15U_5406_1.471. It has been rated as problematic. This issue affects some unknown processing of the component Access Point Setting Handler. The manipulation with the input 12345678 leads to use of hard-coded password. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version MW3_16U_5406_1.53 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-220769 was assigned to this vulnerability.

Related Vulnerabilities

CVE-2014-5431

MEDIUM
CVSS:6.8(Medium)

Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 contains a hard-coded password, which provides access to basic biomedical information,...

CWE-2592014

CVE-2018-8870

MEDIUM
CVSS:6.8(Medium)

Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical access can remove the case of the device, connect to the debu...

CWE-2592018

CVE-2020-7590

MEDIUM
CVSS:6.8(Medium)

A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addition, serial numbers < 40000 running software V4.4.0 are also affected by CVE-202...

CWE-2592020

CVE-2023-28895

MEDIUM
CVSS:6.8(Medium)

The password for access to the debugging console of the PoWer Controller chip (PWC) of the MIB3 infotainment is hard-coded in the firmware. The console allows attackers with physical access to the MIB...

CWE-2592023

CVE-2025-1879

LOW
CVSS:6.8(Medium)

A vulnerability was found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This issue affects some unknown processing of the component APK. The manipulation leads to hard-coded cre...

CWE-2592025

CVE-2025-25984

MEDIUM
CVSS:6.8(Medium)

An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proximate attacker to execute arbitrary code via UART component.

CWE-2592025