CVE-2023-31185— ROZCOM server framework
Quick assessment
Affected
ROZCOM server framework
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
ROZCOM client是ROZCOM公司的一个对讲机系统。 ROZCOM server framework存在安全漏洞。攻击者利用该漏洞可以通过未指定的请求泄露信息。
Possible ATT&CK Techniques 1 AI
T1005 · Data from Local System
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-31185
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ROZCOM server framework
Source: CVE Program / CVE List V5
Vulnerability Description
ROZCOM server framework - Misconfiguration may allow information disclosure via an unspecified request.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
ROZCOM client 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ROZCOM client是ROZCOM公司的一个对讲机系统。 ROZCOM server framework存在安全漏洞。攻击者利用该漏洞可以通过未指定的请求泄露信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| ROZCOM | server framework | Update to the latest version ~ All versions* | - |
|
II. Public POCs for CVE-2023-31185
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-31185
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same vendor: ROZCOM
Same weakness: CWE-200
-
CVE-2026-108811
WMCMS index.php information disclosure -
CVE-2026-108810
tsi-coop tsi-dpdp-cms JSON Schema Validation information dis -
CVE-2026-108861
Odoo MCP 1.0.0 through 1.3.2 Information Disclosure via exec -
CVE-2026-108578
Neterbit NW-431F Embedded Web Server sms.json information di -
CVE-2026-18496
Booking Calendar <= 11.4.3 - Unauthenticated Sensitive Infor
V. Comments for CVE-2023-31185
No comments yet