CVE-2023-5457

CVSS 7.5v3.1pub. 2024-03-05upd. 2025-04-09

A CWE-1269 “Product Released in Non-Release Configuration” vulnerability in the Django web framework used by the web application (due to the “debug” configuration parameter set to “True”) allows a remote unauthenticated attacker to access critical information and have other unspecified impacts to the confidentiality, integrity, and availability of the application. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Ailux Imx6
APP
Ailux
< 1.0.7-2

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

Tags

Auth Bypass

CWE

CWE-1269

NVD-CWE-Other

References

www.nozominetworks.com/labs/vulnerability-advisories-cv…

Related vulnerabilities

CVE-2023-5456HIGH8.1ten sam produkt

A CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web application allows ...

CVE-2023-45591HIGH7.5ten sam produkt

A CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the “Ax_rtu” binary a...

CVE-2023-45593MEDIUM6.8ten sam produkt

A CWE-184 “Incomplete List of Disallowed Inputs” vulnerability in the embedded Chromium browser (concerning th...

CVE-2023-45595MEDIUM5.9ten sam produkt

A CWE-434 “Unrestricted Upload of File with Dangerous Type” vulnerability in the “file_configuration” function...

CVE-2023-45594MEDIUM6.8ten sam produkt

A CWE-552 “Files or Directories Accessible to External Parties” vulnerability in the embedded Chromium browser...

CVE-2023-5457

Ailux Imx6

Related vulnerabilities