CVE-2023-23119

MEDIUM Year: 2023
CVSS v3 Score
5.9
Medium
Weakness Type
CWE-354
View all →

Vulnerability Description

The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes Ubiquiti airFiber AF2X Radio firmware version 3.2.2 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle (MITM) attack to modify the new firmware image and bypass the checksum verification.

Related Vulnerabilities

CVE-2016-15028

MEDIUM
CVSS:5.9(Medium)

A vulnerability was found in ICEPAY REST-API-NET 0.9. It has been declared as problematic. Affected by this vulnerability is the function RestClient of the file Classes/RestClient.cs of the component ...

CWE-3542016

CVE-2018-1000159

MEDIUM
CVSS:5.9(Medium)

tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in TLS implementation, tlslit...

CWE-3542018

CVE-2019-1166

MEDIUM
CVSS:5.9(Medium)

A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection, aka 'Windows NTLM Tampering Vu...

CWE-3542019

CVE-2023-23120

MEDIUM
CVSS:5.9(Medium)

The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes TRENDnet TV-IP651WI Network Camera firmware version v1.07.01 and earlier vulnerable to firmware ...

CWE-3542023

CVE-2023-34459

MEDIUM
CVSS:5.9(Medium)

OpenZeppelin Contracts is a library for smart contract development. Starting in version 4.7.0 and prior to version 4.9.2, when the `verifyMultiProof`, `verifyMultiProofCalldata`, `procesprocessMultiPr...

CWE-3542023

CVE-2023-48795

MEDIUM
CVSS:5.9(Medium)

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from ...

CWE-3542023