CVE Catalog

CVE-2023-3048

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.30%

67th percentile - higher than 67% of all known CVEs

Summary

The vulnerability in TMT Lockcell allows authorization bypass through a user-controlled key, leading to authentication abuse and the ability to bypass authentication.

Risk Assessment

Organizations may be exposed to unauthorized access to systems, potentially leading to serious security breaches.

Recommendation

It is recommended to update Lockcell to version 15 or later to mitigate this vulnerability.

Original NVD description (English source)

Authorization Bypass Through User-Controlled Key vulnerability in TMT Lockcell allows Authentication Abuse, Authentication Bypass. This issue affects Lockcell: before 15.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS