CVE-2023-0321

 

Published at: - 26-01-2023 10:18

Last modified: - 27-01-2023 03:03

Total changes: - 2

Description

Campbell Scientific dataloggers CR6, CR300, CR800, CR1000 and CR3000 may allow an attacker to download configuration files, which may contain sensitive information about the internal network. From factory defaults, the mentioned datalogges have HTTP and PakBus enabled. The devices, with the default configuration, allow this situation via the PakBus port. The exploitation of this vulnerability may allow an attacker to download, modify, and upload new configuration files.

Common Vulnerability Scoring System (CVSS)

-

 

Verification logic

 

Reference

• https://www.incibe-cert.es/en/early-warning/ics-advisories/disclosure-sensitive-information-campbell-scientific-products
• https://www.hackplayers.com/2023/01/cve-2023-0321-info-sensible-campbell.html

 

Keywords

NVD

 

CVE-2023-0321

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures