{"id":"CVE-2023-0348","state":"PUBLISHED","title":"CVE-2023-0348","description":"Akuvox E11 allows direct SIP calls. No access control is enforced by the SIP servers, which could allow an attacker to contact any device within Akuvox to call any other device.","publishedAt":"2023-03-13T20:24:11.414Z","updatedAt":"2025-01-16T21:54:37.252Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","source":"icscert"},"assigner":"icscert","products":["Akuvox E11"],"affected":[{"vendor":"Akuvox","product":"E11","versions":[{"version":"All","status":"affected"}]}],"references":["https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:36.141Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/0xxx/CVE-2023-0348.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-0348","state":"PUBLISHED","datePublished":"2023-03-13T20:24:11.414Z","dateUpdated":"2025-01-16T21:54:37.252Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2023-01-17T19:26:10.294Z"},"containers":{"cna":{"title":"CVE-2023-0348","descriptions":[{"lang":"en","value":"Akuvox E11 allows direct SIP calls. No access control is enforced by the SIP servers, which could allow an attacker to contact any device within Akuvox to call any other device."}],"affected":[{"vendor":"Akuvox","product":"E11","versions":[{"version":"All","status":"affected"}]}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"CWE-284 Improper Access Control"}]}],"providerMetadata":{"shortName":"icscert","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateUpdated":"2023-03-13T20:24:11.414Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"VINCE 2.0.6","env":"prod","origin":"https://cveawg.mitre.org/api/cve/CVE-2023-0348"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T05:10:55.711Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-16T20:56:27.559129Z","id":"CVE-2023-0348","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-16T21:54:37.252Z"}}]}}}