CVE Catalog

CVE-2023-36082

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.77%

51th percentile - higher than 51% of all known CVEs

Summary

A vulnerability in the GatesAir Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to obtain LDAP and SMTP credentials, potentially leading to privilege escalation.

Risk Assessment

The organization risks unauthorized control of the radio transmission system and exposure of sensitive authentication data, which could compromise network integrity and confidentiality.

Recommendation

Immediately update the device firmware to the latest version and change all LDAP and SMTP credentials. Additionally, restrict management interface access to trusted networks only.

Original NVD description (English source)

An isssue in GatesAIr Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to gain privileges via the LDAP and SMTP credentials.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS