Permalink
Cannot retrieve contributors at this time
Name already in use
A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
CVE/CVE-2023-29862
Go to fileThis commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
49 lines (39 sloc)
2.43 KB
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Hello, | |
| This email contains information regarding your CVE ID request reports. Each CVE ID request summary is followed by directions or comments for that request. | |
| CVE's that are ** RESERVED ** will remain in a pending state until we are provided with at least one public reference that follows the CVE Entry Reference Requirement rules in section 8.3 (https://www.cve.org/ResourcesSupport/AllResources/CNARules#section_8-3_cve_record_reference_requirements). | |
| For the reports that are given a CVE ID, please be sure to update their respective references to include their assigned CVE IDs. | |
| When the candidates are publicized, please send us the link to the advisory using https://cveform.mitre.org with "Notify CVE about a publication" as the request type. | |
| --------------------------------------------------------------- | |
| > [Vulnerability Type] | |
| >> Incorrect Access Control | |
| --------------------------------------------------------------- | |
| > [Affected Component] | |
| >> Agasio | |
| --------------------------------------------------------------- | |
| > [Attack Type] | |
| >> Remote | |
| --------------------------------------------------------------- | |
| > [CVE Impact Other] | |
| >> Logical flaw vulnerability | |
| --------------------------------------------------------------- | |
| > [Attack Vectors] | |
| >> https://woolly-espadrille-ed5.notion.site/Agasio-Camera-device-has-a-logic-flaw-vulnerability-d4514e7217c54dd7ac62582b6664aa66 | |
| --------------------------------------------------------------- | |
| > [Discoverer] | |
| >> Duke | |
| --------------------------------------------------------------- | |
| > [Reference] | |
| >> https://woolly-espadrille-ed5.notion.site/Agasio-Camera-device-has-a-logic-flaw-vulnerability-d4514e7217c54dd7ac62582b6664aa66 | |
| --------------------------------------------------------------- | |
| > [Vendor of Product] | |
| >> http://www.xxx.com | |
| --------------------------------------------------------------- | |
| > [Affected Product Code Base] | |
| >> Agasio Other | |
| --------------------------------------------------------------- | |
| Use CVE-2023-29862 for: | |
| ** RESERVED ** An issue found in Agasio-Camera device version not specified allows a remote attacker to execute arbitrary code via the check and authLevel parameters. | |
| Changes, additions, or updates to your request should be sent via a new CVE ID Request through our webform at https://cveform.mitre.org/. You may reference this service request number (1421783) if you need to refer back to this specific report. | |
| Thank you, | |
| CVE Assignment Team | |
| M/S M300, 202 Burlington Road, Bedford, MA 01730 USA |