What’s Vulnerable › Vulnerabilities

CVE-2023-51059

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-01-16 · updated 2026-06-17

Description

An issue in MOKO TECHNOLOGY LTD MOKOSmart MKGW1 BLE Gateway v.1.1.1 and before allows a remote attacker to escalate privileges via the session management component of the administrative web interface.

Affected products

• Mokosmart Mkgw1 Gateway Firmware: through 1.1.1

References

• https://github.com/sbaresearch/advisories/tree/public/2022/SBA-ADV-20220120-01_MOKOSmart_MKGW1_Gateway_Improper_Session_Management
• https://www.mokosmart.com/wp-content/uploads/2019/10/GS-gateway.pdf
• http://seclists.org/fulldisclosure/2024/Jan/6
• https://github.com/sbaresearch/advisories/tree/public/2022/SBA-ADV-20220120-01_MOKOSmart_MKGW1_Gateway_Improper_Session_Management
• https://www.mokosmart.com/wp-content/uploads/2019/10/GS-gateway.pdf

Get alerted when CVE-2023-51059 or the next vulnerability affects your stack