How severe is CVE-2021-23843?

This vulnerability has a severity rating of HIGH with a CVSS score of 7.8 out of 10.

What type of vulnerability is CVE-2021-23843?

This is classified as CWE-306, which is a common weakness in software security.

CVE-2021-23843 - HIGH Severity | CVSS 7.8

Vulnerability Description

The Bosch software tools AccessIPConfig.exe and AmcIpConfig.exe are used to configure certains settings in AMC2 devices. The tool allows putting a password protection on configured devices to restrict access to the configuration of an AMC2. An attacker can circumvent this protection and make unauthorized changes to configuration data on the device. An attacker can exploit this vulnerability to manipulate the device\'s configuration or make it unresponsive in the local network. The attacker needs to have access to the local network, typically even the same subnet.

Related Vulnerabilities

CVE-2004-0213

HIGH

CVSS:7.8(High)

Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter" style attack that send...

CWE-3062004

CVE-2008-6827

HIGH

CVSS:7.8(High)

The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 allows local users to gain SYSTEM privileges and execute arbitrary commands via a "S...

CWE-3062008

CVE-2011-2187

HIGH

CVSS:7.8(High)

xscreensaver before 5.14 crashes during activation and leaves the screen unlocked when in Blank Only Mode and when DPMS is disabled, which allows local attackers to access resources without authentica...

CWE-3062011

CVE-2014-7271

HIGH

CVSS:7.8(High)

Simple Desktop Display Manager (SDDM) before 0.10.0 allows local users to log in as user "sddm" without authentication.

CWE-3062014

CVE-2015-9030

HIGH

CVSS:7.8(High)

In all Android releases from CAF using the Linux kernel, the Hypervisor API could be misused to bypass authentication.

CWE-3062015

CVE-2018-19636

HIGH

CVSS:7.8(High)

Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath binary. If an attacker provides one at an arbitrary location it is executed with r...

CWE-3062018