CVE-2023-45593

CVSS V2 None CVSS V3 None

Description

A CWE-693 “Protection Mechanism Failure” vulnerability in the embedded Chromium browser (concerning the handling of alternative URLs, other than “ http://localhost” http://localhost” ) allows a physical attacker to read arbitrary files on the file system, alter the configuration of the embedded browser, and have other unspecified impacts to the confidentiality, integrity, and availability of the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

Overview

CVE ID
CVE-2023-45593

Assigner
Nozomi

Vulnerability Status
PUBLISHED

Published Version
2024-03-05T11:27:46.837Z

Last Modified Date
2024-03-05T11:27:46.837Z

Weakness Enumerations

CWE	URL
CWE-693	http://cwe.mitre.org/data/definitions/693.html

References

Reference URL	Reference Tags
https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45593

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-45593
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45593

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 10:29:43				Added to TrackCVE