CVE-2023-47304

7.8 highEPSS 0.3%

High (7.8) in vonage vdv23 firmware. EPSS 0.3% chance of exploitation in the next 30 days.

An issue was discovered in Vonage Box Telephone Adapter VDV23 version VDV21-3.2.11-0.5.1, allows local attackers to bypass UART authentication controls and read/write arbitrary values to the memory of the device.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2023-12-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vonage:vdv23_firmware

References

https://trojanhorsey.substack.com/p/cve-2023-47304-unsecured-uart-in
https://trojanhorsey.substack.com/p/cve-2023-47304-unsecured-uart-in

Check your stack JSON