CVE-2023-4227

MEDIUM Year: 2023
CVSS v3 Score
6.5
Medium
Weakness Type
CWE-489
View all →

Vulnerability Description

A vulnerability has been identified in the ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, which can be exploited by malicious actors to potentially gain unauthorized access to the product. This could lead to security breaches, data theft, and unauthorized manipulation of sensitive information. The vulnerability is attributed to the presence of an unauthorized service, which could potentially enable unauthorized access to the. device.

Related Vulnerabilities

CVE-2021-23861

MEDIUM
CVSS:6.5(Medium)

By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software. ...

CWE-4892021

CVE-2022-26023

MEDIUM
CVSS:6.5(Medium)

A leftover debug code vulnerability exists in the console verify functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted series of network requests can lead to disabling security fea...

CWE-4892022

CVE-2022-28689

MEDIUM
CVSS:6.5(Medium)

A leftover debug code vulnerability exists in the console support functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted network request can lead to arbitrary command execution. An ...

CWE-4892022

CVE-2022-29888

MEDIUM
CVSS:6.5(Medium)

A leftover debug code vulnerability exists in the httpd port 4444 upload.cgi functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted HTTP request can lead to arbitrary file deletion....

CWE-4892022

CVE-2021-1391

MEDIUM
CVSS:6.7(Medium)

A vulnerability in the dragonite debugger of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root privilege. The vulnerability is due to the p...

CWE-4892021

CVE-2021-3971

MEDIUM
CVSS:6.7(Medium)

A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with ele...

CWE-4892021