CVEブラウザに戻る

CVE-2023-3048

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0110%

EPSS Percentile26.95th

Published2023年6月13日

Last Modified2026年5月22日

Vulnerability Description

Authorization Bypass Through User-Controlled Key vulnerability in TMT Lockcell allows Authentication Abuse, Authentication Bypass. This issue affects Lockcell: before 15.

Affected Platforms (CPE)

💻

Tmtmakine

Lockcell Firmware

< 15.0

References & Advisories

🔗 https://fordefence.com/cve-2023-3048-authorization-bypass-through-user-controlled-key-vulnerability-allows-authentication-abuse-authentication-bypass/

🔗 https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0345

🔗 https://www.usom.gov.tr/bildirim/tr-23-0345

🔗 https://fordefence.com/cve-2023-3048-authorization-bypass-through-user-controlled-key-vulnerability-allows-authentication-abuse-authentication-bypass/

🔗 https://www.usom.gov.tr/bildirim/tr-23-0345

関連する脆弱性情報

CVE-2023-11149.8

Missing Authorization vulnerability in Eskom e-Belediye allows Information Elicitation. This issue affects e-Belediye: from 1.0.0...

CVE-2023-08399.8

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in ProMIS Process Co. InSCADA allows Account Footp...

CVE-2023-09399.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NTN Information Technologies...

CVE-2023-09799.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MedData MedDataPACS allows S...