CVE-2022-40903
Medium
Description
Aiphone GT-DMB-N 3-in-1 Video Entrance Station with NFC Reader 1.0.3 does not mitigate against repeated failed access attempts, which allows an attacker to gain administrative privileges.
SeverityMedium
CVSS6.5
Exploit probability—
ProductAiphone Gt-dmb-n Firmware
PublishedNov 14, 2022
First seenNov 14, 2022
Weakness typeCWE-307CWE-307
How to fix
Update
- aiphone gt-dmb-n_firmware3.00 or later
- aiphone gt-dmb_firmware3.00 or later
- aiphone gt-dmb-lvn_firmware3.00 or later
- aiphone gt-db-vn_firmware2.00 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aiphone gt-dmb-n_firmware | v < 3.00 | 3.00 |
| aiphone gt-dmb_firmware | v < 3.00 | 3.00 |
| aiphone gt-dmb-lvn_firmware | v < 3.00 | 3.00 |
| aiphone gt-db-vn_firmware | v < 2.00 | 2.00 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.