{"id":"CVE-2023-0349","state":"PUBLISHED","title":"CVE-2023-0349","description":"The Akuvox E11 libvoice library provides unauthenticated access to the camera capture for image and video. This could allow an attacker to view and record image and video from the camera.","publishedAt":"2023-03-13T20:23:34.393Z","updatedAt":"2025-01-16T21:54:44.197Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","source":"icscert"},"assigner":"icscert","products":["Akuvox E11"],"affected":[{"vendor":"Akuvox","product":"E11","versions":[{"version":"All","status":"affected"}]}],"references":["https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:36.141Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/0xxx/CVE-2023-0349.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-0349","state":"PUBLISHED","datePublished":"2023-03-13T20:23:34.393Z","dateUpdated":"2025-01-16T21:54:44.197Z","assignerShortName":"icscert","assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateReserved":"2023-01-17T19:26:25.206Z"},"containers":{"cna":{"title":"CVE-2023-0349","descriptions":[{"lang":"en","value":"The Akuvox E11 libvoice library provides unauthenticated access to the camera capture for image and video. This could allow an attacker to view and record image and video from the camera."}],"affected":[{"vendor":"Akuvox","product":"E11","versions":[{"version":"All","status":"affected"}]}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"shortName":"icscert","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","dateUpdated":"2023-03-13T20:23:34.393Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"VINCE 2.0.6","env":"prod","origin":"https://cveawg.mitre.org/api/cve/CVE-2023-0349"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T05:10:55.578Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-16T20:56:30.495633Z","id":"CVE-2023-0349","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-16T21:54:44.197Z"}}]}}}