CVE Catalog

CVE-2023-42425

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.83%

53th percentile - higher than 53% of all known CVEs

Summary

A vulnerability in Turing Video Turing Edge+ EVC5FD version 1.38.6 allows a remote attacker to execute arbitrary code and obtain sensitive information via cloud connection components.

Risk Assessment

The organization is at risk of remote device takeover and sensitive data leakage, potentially leading to infrastructure compromise and loss of customer trust.

Recommendation

Immediately update the device firmware to the latest version and restrict access to cloud components using firewalls and network segmentation.

Original NVD description (English source)

An issue in Turing Video Turing Edge+ EVC5FD v.1.38.6 allows remote attacker to execute arbitrary code and obtain sensitive information via the cloud connection components.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS