CVE-2023-2759

8.8 highEPSS 0.6%

High (8.8) in taphome core firmware. EPSS 0.6% chance of exploitation in the next 30 days.

A hidden API exists in TapHome's core platform before version 2023.2 that allows an authenticated, low privileged user to change passwords of other users without any prior knowledge. The attacker may gain full access to the device by using this vulnerability.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2023-07-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

taphome:core_firmware

References

https://claroty.com/team82/disclosure-dashboard/cve-2023-2759
https://claroty.com/team82/disclosure-dashboard/cve-2023-2759

Check your stack JSON