CVE-2023-30024

CVSS V2 None CVSS V3 None
Description
Insecure Permissions vulnerability found in MagicJack A921 USB Phone Jack Rev 3.0 v.1.4 allows a physically proximate attacker to escalate privileges and gain access to sensitive information via the NAND flash memory.
Overview
  • CVE ID
  • CVE-2023-30024
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Received
  • Published Version
  • 2023-04-28T13:15:13
  • Last Modified Date
  • 2023-04-28T13:15:13
References
Reference URL Reference Tags
https://drive.google.com/drive/folders/1cKd8hksThK610GPtBQ3du8DEkwKywlAi?usp=sharing
https://pastebin.com/raw/irWcawp8
https://samuraisecurity.co.uk/red-teaming-0x01-click-rce-via-voip-usb/
https://www.magicjack.com/
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-30024
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30024
History
Created Old Value New Value Data Type Notes
2023-04-28 14:01:19 Added to TrackCVE