CVE-2023-0354

—

CVSS 3.1

9.1 critical

EPSS

<1%p48

Published

Mar 13, 2023 (Mar 13, 2023)

Modified

Jun 17, 2026

Description

The Akuvox E11 web server can be accessed without any user authentication, and this could allow an attacker to access sensitive information, as well as create and download packet captures with known default URLs.

Vendors: akuvox
Products: e11 firmware
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news2 stories

Remote Code Execution and Camera Access Flaws Found in Smart Intercoms

Infosecurity MagazineMar 13, 17:30 UTC · Mar 13, 2023Vulnerability CVE-2023-0354 CVE-2023-0351 CVE-2023-0348

Researchers Uncover Over a Dozen Security Flaws in Akuvox E11 Smart Intercom

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2023Vulnerability CVE-2023-0344 CVE-2023-0345 CVE-2023-0352+5 CVEs