Exploitation Summary
EIP tracks 1 public exploit for CVE-2023-46294. PoCs published by Manouchehri.
AI-analyzed exploit summary The repository describes a vulnerability in Teledyne FLIR M300 where locally encrypted account passwords can be decrypted to plaintext using the `umSetup` utility with root permissions. The issue remains unpatched despite multiple disclosures.
Description
An issue was discovered in Teledyne FLIR M300 2.00-19. User account passwords are encrypted locally, and can be decrypted to cleartext passwords using the utility umSetup. This utility requires root permissions to execute.
Exploits (1)
The repository describes a vulnerability in Teledyne FLIR M300 where locally encrypted account passwords can be decrypted to plaintext using the `umSetup` utility with root permissions. The issue remains unpatched despite multiple disclosures.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N