What’s Vulnerable › Vulnerabilities

CVE-2023-3453: ETIC Telecom Insecure Default Initialization of Resource

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-23 · updated 2026-06-17
• Weakness: CWE-1188

Description

ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition.

Affected products

• ETIC Telecom Remote Access Server (RAS): through 4.7.0

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-208-01
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-208-01

Get alerted when CVE-2023-3453 or the next vulnerability affects your stack