Vulnerability record/PUBLISHED/Published Mar 31, 2023 06:30:25 UTC

CVE-2023-28727

Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due to mishandling of X-Forwarded-For headers.

Base score9.6/ 10

SeverityCriticalCVSS 3.1

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityCritical

Attack vectorAdjacentAV

Attack complexityLowAC

Privileges requiredNonePR

User interactionNoneUI

ScopeChangedS

Confidentiality impactHighC

Integrity impactHighI

Availability impactHighA

CVSS vector stringCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering AuthorityPanasonic Corporation

Last updatedFeb 12, 2025 14:48:07 UTC

PublishedMar 31, 2023 06:30:25 UTC

ReservedMar 22, 2023 05:49:11 UTC