VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 11, 2023· Updated Feb 11, 2025

CVE-2023-23575

CVE-2023-23575

Description

Improper access control vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker to bypass access restriction and access Network Maintenance page, which may result in obtaining the network information of the product. The affected products and versions are as follows: M2M Gateway with the firmware Ver.3.7.10 and earlier (CPS-MG341-ADSC1-111, CPS-MG341-ADSC1-931, CPS-MG341G-ADSC1-111, CPS-MG341G-ADSC1-930, and CPS-MG341G5-ADSC1-931), M2M Controller Integrated Type with firmware Ver.3.7.6 and earlier versions (CPS-MC341-ADSC1-111, CPS-MC341-ADSC1-931, CPS-MC341-ADSC2-111, CPS-MC341G-ADSC1-110, CPS-MC341Q-ADSC1-111, CPS-MC341-DS1-111, CPS-MC341-DS11-111, CPS-MC341-DS2-911, and CPS-MC341-A1-111), and M2M Controller Configurable Type with firmware Ver.3.8.8 and earlier versions (CPS-MCS341-DS1-111, CPS-MCS341-DS1-131, CPS-MCS341G-DS1-130, CPS-MCS341G5-DS1-130, and CPS-MCS341Q-DS1-131).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Contec Co., Ltd./CONPROSYS IoT Gatewayllm-create2 versions
    <= 3.7.10 for M2M Gateway; <= 3.7.6 for M2M Controller Integrated Type; <= 3.8.8 for M2M Controller Configurable Type+ 1 more
    • (no CPE)range: <= 3.7.10 for M2M Gateway; <= 3.7.6 for M2M Controller Integrated Type; <= 3.8.8 for M2M Controller Configurable Type
    • (no CPE)range: M2M Gateway with the firmware Ver.3.7.10 and earlier (CPS-MG341-ADSC1-111, CPS-MG341-ADSC1-931, CPS-MG341G-ADSC1-111, CPS-MG341G-ADSC1-930, and CPS-MG341G5-ADSC1-931), M2M Controller Integrated Type with firmware Ver.3.7.6 and earlier versions (CPS-MC341-ADSC1-111, CPS-MC341-ADSC1-931, CPS-MC341-ADSC2-111, CPS-MC341G-ADSC1-110, CPS-MC341Q-ADSC1-111, CPS-MC341-DS1-111, CPS-MC341-DS11-111, CPS-MC341-DS2-911, and CPS-MC341-A1-111), and M2M Controller Configurable Type with firmware Ver.3.8.8 and earlier versions (CPS-MCS341-DS1-111, CPS-MCS341-DS1-131, CPS-MCS341G-DS1-130, CPS-MCS341G5-DS1-130, and CPS-MCS341Q-DS1-131)
  • Contec Co., Ltd./M2M Gatewayllm-create
    Range: <= 3.7.10
  • Contec Co., Ltd./M2M Controller Integrated Typellm-create
    Range: <= 3.7.6
  • Contec Co., Ltd./M2M Controller Configurable Typellm-create
    Range: <= 3.8.8

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.