CVE-2023-34873 HIGH

CVE-2023-34873

Vendor Mobotix

Product P3

Weakness CWE-78

Published May 23, 2025

Last update May 23, 2025

View on NVD All CVEs

CVSS base score

8.7/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

On MOBOTIX P3 cameras before MX-V4.7.2.18 and Mx6 cameras before MX-V5.2.0.61, the tcpdump feature does not properly validate input, which allows authenticated users to execute code.

Key dates

02Disclosure timeline

May 23, 2025 CVE published

May 23, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-34873 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/78.html

Related vulnerabilities

Identifiers

CVE CVE-2023-34873

CWE CWE-78

CVSS 8.7 / HIGH

Affected versions

Vendor Mobotix

Product P3

Affected < MX-V4.7.2.18

Vendor Mobotix

Product Mx6

Affected < MX-V5.2.0.61

CVE-2023-34873

01Description

02Disclosure timeline

03References

04Related CVE