CVE-2023-3453

ETIC Telecom Insecure Default Initialization of Resource

HIGH

8.1

CVSS Score

Published: August 23, 2023 at 09:14 PM UTC

Updated: June 17, 2026 at 06:14 AM UTC

14 products affected across 1 vendorRemote Access Server FirmwareRas-Ew-220Ras-Ecw-400-Lw

Using Remote Access Server (RAS) by ETIC Telecom?

Get instant alerts when new vulnerabilities affect Remote Access Server (RAS) - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.1

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Remote Access Server Firmware · Etictelecom

95%

v ≤ 4.7.0

etictelecom-ras-c-100-lw (environment) · etictelecom-ras-e-100 (environment) · etictelecom-ras-e-220 (environment) · etictelecom-ras-e-400 (environment) · etictelecom-ras-ec-220-lw (environment) · etictelecom-ras-ec-400-lw (environment) · etictelecom-ras-ec-480-lw (environment) · etictelecom-ras-ecw-220-lw (environment) · etictelecom-ras-ecw-400-lw (environment) · etictelecom-ras-ew-100 (environment) · etictelecom-ras-ew-220 (environment) · etictelecom-ras-ew-400 (environment) · etictelecom-rfm-e (environment)

Ras-C-100-Lw · Etictelecomdevice

80%

All versions

Ras-E-100 · Etictelecomdevice

80%

All versions

Ras-E-220 · Etictelecomdevice

80%

All versions

Ras-E-400 · Etictelecomdevice

80%

All versions