CVE-2023-46033

Severity Score

6.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track*

*SSVC

Descriptions

D-Link (Non-US) DSL-2750U N300 ADSL2+ and (Non-US) DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal without proper access control.

D-Link (Non-US) DSL-2750U N300 ADSL2+ y (Non-US) DSL-2730U N150 ADSL2+ son vulnerables a un control de acceso incorrecto. La interfaz UART/Serial en la PCB proporciona salida de registro y un terminal root sin control de acceso adecuado.

*Credits: N/A

CVSS Scores

NISTv3.1 6.8

Attack Vector

Physical

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:Track*

Exploitation

None

Automatable

Tech. Impact

Total

* Organization's Worst-case Scenario

Timeline

2023-10-16 CVE Reserved
2023-10-19 CVE Published
2024-09-12 CVE Updated
2024-11-20 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-284: Improper Access Control

CAPEC

References (3)

URL	Tag	Source
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10357	Product
https://www.dlink.com/en/products/dsl-2730u-wireless-n150-adsl2-router	Product
https://www.dlink.com/en/products/dsl-2750u-wireless-n-300-adsl2-modem-router	Product

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Dlink Search vendor "Dlink"	Dsl-2730u Firmware Search vendor "Dlink" for product "Dsl-2730u Firmware"	-	-	Affected	in	Dlink Search vendor "Dlink"	Dsl-2730u Search vendor "Dlink" for product "Dsl-2730u"	-	-	Safe
Dlink Search vendor "Dlink"	Dsl-2750u Firmware Search vendor "Dlink" for product "Dsl-2750u Firmware"	-	-	Affected	in	Dlink Search vendor "Dlink"	Dsl-2750u Search vendor "Dlink" for product "Dsl-2750u"	-	-	Safe

* End Of Life in some or all products. Do not expect updates.