CVE-2023-35794
HIGHCassia Access Controller 2.1.1.2303271039 - Unauthenticated Web SSH Terminal Access
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-35794. PoCs published by Dodge-MPTC.
AI-analyzed exploit summary This repository provides a detailed writeup of CVE-2023-35794, an incorrect access control vulnerability in Cassia Networks Access Controller. It describes how WebSSH sessions can be hijacked without authentication, leveraging default credentials and potentially chaining with CVE-2023-35793 for CSRF exploitation.
Description
An issue was discovered in Cassia Access Controller 2.1.1.2303271039. The Web SSH terminal endpoint (spawned console) can be accessed without authentication. Specifically, there is no session cookie validation on the Access Controller; instead, there is only Basic Authentication to the SSH console.
Exploits (1)
This repository provides a detailed writeup of CVE-2023-35794, an incorrect access control vulnerability in Cassia Networks Access Controller. It describes how WebSSH sessions can be hijacked without authentication, leveraging default credentials and potentially chaining with CVE-2023-35793 for CSRF exploitation.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H