CVSS 3.1
4.6 mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2023-6259
Medium (4.6) in brivo. EPSS 0.2% chance of exploitation in the next 30 days.
Insufficiently Protected Credentials, : Improper Access Control vulnerability in Brivo ACS100, ACS300 allows Password Recovery Exploitation, Bypassing Physical Security.This issue affects ACS100, ACS300: from 5.2.4 before 6.2.4.3.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-522, CWE-284
- Published
- Modified
- Record from
- the NVD, synced
Affected
- brivo:acs100_firmware
- brivo:acs300_firmware