CVE-2023-35836 - Vulnerability Details - OpenCVE

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup and reconfiguration. Upon success, the attacker is able to further infiltrate the target's Wi-Fi networks.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Solax	Pocket Wifi 3 Pocket Wifi 3 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:solax:pocket_wifi_3_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:solax:pocket_wifi_3:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.solaxpower.com/downloads/
https://www.solaxpower.com/help/upgrading-the-pocket-wifi-firmware/
https://yougottahackthat.com/blog/
https://yougottahackthat.com/blog/1370/solax-inverters-pocket-wifi-using-poor-authentication

History

Mon, 28 Oct 2024 19:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-863
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-01-23T00:00:00

Updated: 2024-10-28T19:09:13.996Z

Reserved: 2023-06-18T00:00:00

Link: CVE-2023-35836

Vulnrichment

Updated: 2024-08-02T16:30:45.371Z

NVD

Status : Modified

Published: 2024-01-23T23:15:08.000

Modified: 2024-11-21T08:08:47.313

Link: CVE-2023-35836

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-35836", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-10-28T19:09:13.996Z", "dateReserved": "2023-06-18T00:00:00", "datePublished": "2024-01-23T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-01-23T22:39:13.908409"}, "descriptions": [{"lang": "en", "value": "An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup and reconfiguration. Upon success, the attacker is able to further infiltrate the target's Wi-Fi networks."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://yougottahackthat.com/blog/"}, {"url": "https://www.solaxpower.com/help/upgrading-the-pocket-wifi-firmware/"}, {"url": "https://www.solaxpower.com/downloads/"}, {"url": "https://yougottahackthat.com/blog/1370/solax-inverters-pocket-wifi-using-poor-authentication"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T16:30:45.371Z"}, "title": "CVE Program Container", "references": [{"url": "https://yougottahackthat.com/blog/", "tags": ["x_transferred"]}, {"url": "https://www.solaxpower.com/help/upgrading-the-pocket-wifi-firmware/", "tags": ["x_transferred"]}, {"url": "https://www.solaxpower.com/downloads/", "tags": ["x_transferred"]}, {"url": "https://yougottahackthat.com/blog/1370/solax-inverters-pocket-wifi-using-poor-authentication", "tags": ["x_transferred"]}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-863", "lang": "en", "description": "CWE-863 Incorrect Authorization"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-26T18:52:36.724299Z", "id": "CVE-2023-35836", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-28T19:09:13.996Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://yougottahackthat.com/blog/", "tags": ["x_transferred"]}, {"url": "https://www.solaxpower.com/help/upgrading-the-pocket-wifi-firmware/", "tags": ["x_transferred"]}, {"url": "https://www.solaxpower.com/downloads/", "tags": ["x_transferred"]}, {"url": "https://yougottahackthat.com/blog/1370/solax-inverters-pocket-wifi-using-poor-authentication", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T16:30:45.371Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-35836", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-08-26T18:52:36.724299Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-863", "description": "CWE-863 Incorrect Authorization"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-26T18:53:42.979Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://yougottahackthat.com/blog/"}, {"url": "https://www.solaxpower.com/help/upgrading-the-pocket-wifi-firmware/"}, {"url": "https://www.solaxpower.com/downloads/"}, {"url": "https://yougottahackthat.com/blog/1370/solax-inverters-pocket-wifi-using-poor-authentication"}], "descriptions": [{"lang": "en", "value": "An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup and reconfiguration. Upon success, the attacker is able to further infiltrate the target's Wi-Fi networks."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-01-23T22:39:13.908409"}}}, "cveMetadata": {"cveId": "CVE-2023-35836", "state": "PUBLISHED", "dateUpdated": "2024-10-28T19:09:13.996Z", "dateReserved": "2023-06-18T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2024-01-23T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:solax:pocket_wifi_3_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FAA04768-4E31-414A-A19C-855B1E1D8CCE", "versionEndIncluding": "3.009.03_20230504", "versionStartIncluding": "3.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:solax:pocket_wifi_3:-:*:*:*:*:*:*:*", "matchCriteriaId": "112442CA-E44E-4C2B-95C3-9162E56B9F16", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup and reconfiguration. Upon success, the attacker is able to further infiltrate the target's Wi-Fi networks."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en SolaX Pocket WiFi 3 hasta 3.001.02. Un atacante dentro del alcance de RF puede obtener una copia en texto plano de la configuraci\u00f3n de red del dispositivo, incluido el Wi-Fi PSK, durante la instalaci\u00f3n y reconfiguraci\u00f3n del dispositivo. Si tiene \u00e9xito, el atacante puede infiltrarse a\u00fan m\u00e1s en las redes Wi-Fi del objetivo."}], "id": "CVE-2023-35836", "lastModified": "2024-11-21T08:08:47.313", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-01-23T23:15:08.000", "references": [{"source": "cve@mitre.org", "tags": ["Not Applicable"], "url": "https://www.solaxpower.com/downloads/"}, {"source": "cve@mitre.org", "tags": ["Product"], "url": "https://www.solaxpower.com/help/upgrading-the-pocket-wifi-firmware/"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://yougottahackthat.com/blog/"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://yougottahackthat.com/blog/1370/solax-inverters-pocket-wifi-using-poor-authentication"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable"], "url": "https://www.solaxpower.com/downloads/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://www.solaxpower.com/help/upgrading-the-pocket-wifi-firmware/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://yougottahackthat.com/blog/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://yougottahackthat.com/blog/1370/solax-inverters-pocket-wifi-using-poor-authentication"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-863"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}