CVE-2023-49340
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.8epss 0.9%
exploitation probability
0.9%top 43% of all CVEs
observed exploitation
nono source reports it
In short
The Newland Nquire 1000 kiosk has a flaw in its web management portal that allows remote attackers to bypass login requirements and gain unauthorized administrative access without proper credentials.
Technical detail
CWE-287 (improper authentication) and CWE-1390 (weak access control) in the web management interface permit unauthenticated remote attackers to escalate privileges. The vulnerability stems from insufficient validation of user authorization, enabling direct access to administrative functions that should require authentication.
Summary generated and translated by AI from the official description.
An issue was discovered in Newland Nquire 1000 Interactive Kiosk version NQ1000-II_G_V1.00.011, allows remote attackers to escalate privileges and bypass authentication via incorrect access control in the web management portal.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a