CVE-2023-34724

MEDIUM

TECHView LA5570 Wireless Gateway 1.0.19_T53 - Incorrect Authorization via UART Interface

Title source: llm

Description

An issue was discovered in TECHView LA5570 Wireless Gateway 1.0.19_T53, allows physical attackers to gain escalated privileges via the UART interface.

References (3)

Core 3

Core References

Exploit, Third Party Advisory

https://www.exploitsecurity.io/post/cve-2023-34723-cve-2023-34724-cve-2023-34725

Product

https://www.jaycar.com.au/wireless-gateway-home-automation-controller/p/LA5570

Exploit, Third Party Advisory

http://packetstormsecurity.com/files/174553/TECHView-LA5570-Wireless-Gateway-1.0.19_T53-Traversal-Privilege-Escalation.html

Scores

CVSS v3 6.8

EPSS 0.0042

EPSS Percentile 33.7%

Attack Vector PHYSICAL

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-863

Status published

Products (1)

jaycar/la5570_firmware 1.0.19_t53

Published Aug 28, 2023

Tracked Since Feb 18, 2026