CVE-2023-49340

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-03-09 · updated 2026-06-17
Weakness: CWE-287

Description

An issue was discovered in Newland Nquire 1000 Interactive Kiosk version NQ1000-II_G_V1.00.011, allows remote attackers to escalate privileges and bypass authentication via incorrect access control in the web management portal.

Affected products

Newlandemea Nquire 1000 Manta: 1.00.011

References

https://github.com/n0obit4/Vulnerability_Disclosure/tree/main/CVE-2023-49340
https://github.com/n0obit4/Vulnerability_Disclosure/tree/main/CVE-2023-49340

Get alerted when CVE-2023-49340 or the next vulnerability affects your stack