← CVE Intelligence

CVE-2023-2759

TAPHOME Improper Authentication in Core Platform PUBLISHED

Description (CNA)

A hidden API exists in TapHome's core platform before version 2023.2 that allows an authenticated, low privileged user to change passwords of other users without any prior knowledge. The attacker may gain full access to the device by using this vulnerability.

Affected (CNA)

Vendor / productVersions
TAPHOME / Core Platformaffected 0.0 before 2023.2

CWE

CWE-863

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.