CVE-2023-31634
Critical
Description
In TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and operation of user data. After accessing the IP address for the TeslaMate instance, an attacker can switch the port to 3000 to enter Grafana for remote operations. At that time, the default username and password can be used to enter the Grafana management console without logging in, a related issue to CVE-2022-23126.
SeverityCritical
CVSS9.8
Exploit probability59. percentile0.9%
ProductTeslamate
PublishedMar 27, 2024
First seenMar 27, 2024
Weakness typeCWE-287Improper authentication
How to fix
Update
- teslamate teslamate1.27.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| teslamate teslamate | v < 1.27.2 | 1.27.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.