CVE-2023-36483 — MAS (a Carrier brand) MASmobile Classic Authorization Bypass

Description (CNA)

Authorization bypass can be achieved by session ID prediction in MASmobile Classic Android version 1.16.18 and earlier and MASmobile Classic iOS version 1.7.24 and earlier which allows remote attackers to retrieve sensitive data including customer data, security system status, and event history.

Affected (CNA)

Vendor / product	Versions
MAS (a Carrier brand) / MASmobile Classic	affected 1 through 1.16.18
MAS (a Carrier brand) / MASmobile Classic	affected 1 through 1.7.24
MAS (a Carrier brand) / MAS ASP.Net Services	affected 1 through 1.9

CWE

CWE-639

References

https://www.corporate.carrier.com/product-security/advisories-resources/

ADP enrichment

CVE

No English description supplied.

https://www.corporate.carrier.com/product-security/advisories-resources/

CISA-ADP

No English description supplied.

No references supplied.