CVE-2023-0114lowCWE-313

CVE-2023-0114: low-severity vulnerability in Netis Netcore Router

Netis Netcore Router Backup param.file.tgz cleartext storage in a file or on disk

Published · Updated

Follow this CVE+ Monitor Netcore Router

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.3epss 0.1%
A vulnerability was found in Netis Netcore Router. It has been rated as problematic. Affected by this issue is some unknown functionality of the file param.file.tgz of the component Backup Handler. The manipulation leads to cleartext storage in a file or on disk. Local access is required to approach this attack. The identifier of this vulnerability is VDB-217592.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
Netis · Netcore Router
Related CVEs — Netis Netcore Router

In the same product, most dangerous first.

CVE-2018-25069HIGHNetis Netcore Router hard-coded passwordEPSS 0.9%CVE-2023-0113MEDIUMNetis Netcore Router Backup param.file.tgz information disclosureEPSS 0.8%