Cleartext storage of sensitive information in InsydeH2O Kernel - CVE-2023-31041
Published: August 16, 2023
Vulnerability identifier: #VU79587
CSH Severity: Medium
CVSS v4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-31041
CWE-ID: CWE-312
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due cleartext storage of system password. A remote attacker can gain unauthorized access to sensitive information on the system.
Affected software
InsydeH2O Kernel
RUGGEDCOM APE1808CLA-P CC
RUGGEDCOM APE1808W10 CC
RUGGEDCOM APE1808W10
RUGGEDCOM APE1808LNX CC
RUGGEDCOM APE1808LNX
RUGGEDCOM APE1808CLA-S5 CC
RUGGEDCOM APE1808CLA-S5
RUGGEDCOM APE1808CLA-S3 CC
RUGGEDCOM APE1808CLA-S3
RUGGEDCOM APE1808CLA-S1 CC
RUGGEDCOM APE1808CLA-S1
RUGGEDCOM APE1808 ADM
RUGGEDCOM APE1808CLA-P
RUGGEDCOM APE1808 SAM-L CC
RUGGEDCOM APE1808 SAM-L
RUGGEDCOM APE1808 ELAN CC
RUGGEDCOM APE1808 ELAN
RUGGEDCOM APE1808 CLOUDCONNECT CC
RUGGEDCOM APE1808 CLOUDCONNECT
RUGGEDCOM APE1808 CKP CC
RUGGEDCOM APE1808 CKP
RUGGEDCOM APE1808 ADM CC
RUGGEDCOM APE1808CLA-P CC
RUGGEDCOM APE1808W10 CC
RUGGEDCOM APE1808W10
RUGGEDCOM APE1808LNX CC
RUGGEDCOM APE1808LNX
RUGGEDCOM APE1808CLA-S5 CC
RUGGEDCOM APE1808CLA-S5
RUGGEDCOM APE1808CLA-S3 CC
RUGGEDCOM APE1808CLA-S3
RUGGEDCOM APE1808CLA-S1 CC
RUGGEDCOM APE1808CLA-S1
RUGGEDCOM APE1808 ADM
RUGGEDCOM APE1808CLA-P
RUGGEDCOM APE1808 SAM-L CC
RUGGEDCOM APE1808 SAM-L
RUGGEDCOM APE1808 ELAN CC
RUGGEDCOM APE1808 ELAN
RUGGEDCOM APE1808 CLOUDCONNECT CC
RUGGEDCOM APE1808 CLOUDCONNECT
RUGGEDCOM APE1808 CKP CC
RUGGEDCOM APE1808 CKP
RUGGEDCOM APE1808 ADM CC
How to mitigate CVE-2023-31041
Install updates from vendor's website.
RUGGEDCOM APE1808CLA-P CC - update to 1.0.212N
RUGGEDCOM APE1808W10 CC - update to 1.0.212N
RUGGEDCOM APE1808W10 - update to 1.0.212N
RUGGEDCOM APE1808LNX CC - update to 1.0.212N
RUGGEDCOM APE1808LNX - update to 1.0.212N
RUGGEDCOM APE1808CLA-S5 CC - update to 1.0.212N
RUGGEDCOM APE1808CLA-S5 - update to 1.0.212N
RUGGEDCOM APE1808CLA-S3 CC - update to 1.0.212N
RUGGEDCOM APE1808CLA-S3 - update to 1.0.212N
RUGGEDCOM APE1808CLA-S1 CC - update to 1.0.212N
RUGGEDCOM APE1808CLA-S1 - update to 1.0.212N
RUGGEDCOM APE1808 ADM - update to 1.0.212N
RUGGEDCOM APE1808CLA-P - update to 1.0.212N
RUGGEDCOM APE1808 SAM-L CC - update to 1.0.212N
RUGGEDCOM APE1808 SAM-L - update to 1.0.212N
RUGGEDCOM APE1808 ELAN CC - update to 1.0.212N
RUGGEDCOM APE1808 ELAN - update to 1.0.212N
RUGGEDCOM APE1808 CLOUDCONNECT CC - update to 1.0.212N
RUGGEDCOM APE1808 CLOUDCONNECT - update to 1.0.212N
RUGGEDCOM APE1808 CKP CC - update to 1.0.212N
RUGGEDCOM APE1808 CKP - update to 1.0.212N
RUGGEDCOM APE1808 ADM CC - update to 1.0.212N
RUGGEDCOM APE1808W10 CC - update to 1.0.212N
RUGGEDCOM APE1808W10 - update to 1.0.212N
RUGGEDCOM APE1808LNX CC - update to 1.0.212N
RUGGEDCOM APE1808LNX - update to 1.0.212N
RUGGEDCOM APE1808CLA-S5 CC - update to 1.0.212N
RUGGEDCOM APE1808CLA-S5 - update to 1.0.212N
RUGGEDCOM APE1808CLA-S3 CC - update to 1.0.212N
RUGGEDCOM APE1808CLA-S3 - update to 1.0.212N
RUGGEDCOM APE1808CLA-S1 CC - update to 1.0.212N
RUGGEDCOM APE1808CLA-S1 - update to 1.0.212N
RUGGEDCOM APE1808 ADM - update to 1.0.212N
RUGGEDCOM APE1808CLA-P - update to 1.0.212N
RUGGEDCOM APE1808 SAM-L CC - update to 1.0.212N
RUGGEDCOM APE1808 SAM-L - update to 1.0.212N
RUGGEDCOM APE1808 ELAN CC - update to 1.0.212N
RUGGEDCOM APE1808 ELAN - update to 1.0.212N
RUGGEDCOM APE1808 CLOUDCONNECT CC - update to 1.0.212N
RUGGEDCOM APE1808 CLOUDCONNECT - update to 1.0.212N
RUGGEDCOM APE1808 CKP CC - update to 1.0.212N
RUGGEDCOM APE1808 CKP - update to 1.0.212N
RUGGEDCOM APE1808 ADM CC - update to 1.0.212N