CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.8. See the original NVD description below for full technical details.
CVE
CVE-2023-45593
Severity
MEDIUM
CVSS
6.8
EPSS
0.26%
Original NVD Description
A CWE-184 “Incomplete List of Disallowed Inputs” vulnerability in the embedded Chromium browser (concerning the handling of alternative URLs, other than “ http://localhost” ) allows a physical attacker to read arbitrary files on the file system, alter the configuration of the embedded browser, and have other unspecified impacts to the confidentiality, integrity, and availability of the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
Related CVEs
Other vulnerabilities affecting the same vendor(s)