---
cve: "CVE-2023-6729"
severity: "HIGH"
cvss: 7.3
epss: "0.2%"
vendor: "Nokia"
kev: false
exploited: false
published: "2024-10-17 13:15:12"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-11-05T11:03:23+01:00"
---

# CVE-2023-6729

> 7.3 HIGH

## Beschreibung

Nokia SR OS routers allow read-write access to the entire file system via SFTP or SCP for users configured with "access console." Consequently, a low privilege authenticated user with "access console" can read or replace the router configuration file as well as other files stored in the Compact Flash or SD card without using CLI commands. This type of attack can lead to a compromise or denial of service of the router after the system is rebooted.

## CNA-Record (Kanon, cvelistV5)

- CNA: **Nokia**
- State: PUBLISHED
- Stand: 2024-10-17 14:59:12

## CISA-Anreicherung (vulnrichment/ADP)

- CISA-SSVC (Coordinator, v2.0.3):
  - Exploitation: **none**
  - Automatable: **no**
  - Technical Impact: **total**

## CVSS-Vektor

```
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Gering | warn |
| UI Interaktion | Erforderlich | good |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Schwachstellen-Klasse

- **CWE-732** — Incorrect Permission Assignment for Critical Resource
  The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

## Angriffsmuster (CAPEC)

- [CAPEC-1 — Accessing Functionality Not Properly Constrained by ACLs](https://capec.mitre.org/data/definitions/1.html) _(Severity: High)_
- [CAPEC-17 — Using Malicious Files](https://capec.mitre.org/data/definitions/17.html) _(Severity: Very High)_
- [CAPEC-60 — Reusing Session IDs (aka Session Replay)](https://capec.mitre.org/data/definitions/60.html) _(Severity: High)_
- [CAPEC-122 — Privilege Abuse](https://capec.mitre.org/data/definitions/122.html) _(Severity: Medium)_
- [CAPEC-127 — Directory Indexing](https://capec.mitre.org/data/definitions/127.html) _(Severity: Medium)_
- [CAPEC-180 — Exploiting Incorrectly Configured Access Control Security Levels](https://capec.mitre.org/data/definitions/180.html) _(Severity: Medium)_
- [CAPEC-206 — Signing Malicious Code](https://capec.mitre.org/data/definitions/206.html) _(Severity: Very High)_
- [CAPEC-234 — Hijacking a privileged process](https://capec.mitre.org/data/definitions/234.html) _(Severity: Medium)_

## ATT&CK-Techniken

- [T1574.010 — Hijack Execution Flow: ServicesFile Permissions Weakness](https://attack.mitre.org/techniques/T1574/010/)
- [T1574.005 — Hijack Execution Flow: Executable Installer File Permissions](https://attack.mitre.org/techniques/T1574/005/)
- [T1134.001 — Access Token Manipulation:Token Impersonation/Theft](https://attack.mitre.org/techniques/T1134/001/)
- [T1550.004 — Use Alternate Authentication Material:Web Session Cookie](https://attack.mitre.org/techniques/T1550/004/)
- [T1548 — Abuse Elevation Control Mechanism](https://attack.mitre.org/techniques/T1548/)
- [T1083 — File and Directory Discovery](https://attack.mitre.org/techniques/T1083/)
- [T1553.002 — Subvert Trust Controls:Code Signing](https://attack.mitre.org/techniques/T1553/002/)

## Referenzen

- <https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-6729/>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2023-6729/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_