Proscend Advice ICR Series routers fw version 1.76
Priority MEDIUM 50CWE-1392Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
Proscend Advice ICR Series routers FW version 1.76 - CWE-1392: Use of Default Credentials
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00621 50th percentileScored 2026-11-07
Fix Fixed ICR Series routers FW (Proscend Advice): Upgrade to fw version 2.24.
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Proscend Advice | ICR Series routers FW | version 1.76 to before Upgrade to fw version 2.24. | Upgrade to fw version 2.24. | Patch available | CNA |
- ICR Series routers FW VendorProscend Advice Affected version 1.76 to before Upgrade to fw version 2.24. Fixed in Upgrade to fw version 2.24. Patch available CNA
CPE configurations NVD · 40
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:proscend:m357-5g_firmware:1.76:*:*:*:*:*:*:* | 1.76 | Vulnerable | PROSCEND |
| cpe:2.3:h:proscend:m357-5g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PROSCEND |
| cpe:2.3:o:proscend:m357-ai_firmware:1.76:*:*:*:*:*:*:* | 1.76 | Vulnerable | PROSCEND |
| cpe:2.3:h:proscend:m357-ai:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PROSCEND |
| cpe:2.3:o:proscend:m350-5g_firmware:1.76:*:*:*:*:*:*:* | 1.76 | Vulnerable | PROSCEND |
| cpe:2.3:h:proscend:m350-5g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PROSCEND |
| cpe:2.3:o:proscend:m350-w5g_firmware:1.76:*:*:*:*:*:*:* | 1.76 | Vulnerable | PROSCEND |
| cpe:2.3:h:proscend:m350-w5g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PROSCEND |
| cpe:2.3:o:proscend:m350-6_firmware:1.76:*:*:*:*:*:*:* | 1.76 | Vulnerable | PROSCEND |
| cpe:2.3:h:proscend:m350-6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PROSCEND |
- cpe:2.3:o:proscend:m357-5g_firmware:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·PROSCEND
- cpe:2.3:h:proscend:m357-5g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PROSCEND
- cpe:2.3:o:proscend:m357-ai_firmware:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·PROSCEND
- cpe:2.3:h:proscend:m357-ai:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PROSCEND
- cpe:2.3:o:proscend:m350-5g_firmware:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·PROSCEND
- cpe:2.3:h:proscend:m350-5g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PROSCEND
- cpe:2.3:o:proscend:m350-w5g_firmware:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·PROSCEND
- cpe:2.3:h:proscend:m350-w5g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PROSCEND
- cpe:2.3:o:proscend:m350-6_firmware:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·PROSCEND
- cpe:2.3:h:proscend:m350-6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PROSCEND
Show 30 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:proscend:m350-w6_firmware:1.76:*:*:*:*:*:*:* | 1.76 | Vulnerable | PROSCEND |
| cpe:2.3:h:proscend:m350-w6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PROSCEND |
| cpe:2.3:o:proscend:m331_firmware:1.76:*:*:*:*:*:*:* | 1.76 | Vulnerable | PROSCEND |
| cpe:2.3:h:proscend:m331:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PROSCEND |
| cpe:2.3:o:proscend:m330-w_firmware:1.76:*:*:*:*:*:*:* | 1.76 | Vulnerable | PROSCEND |
| cpe:2.3:h:proscend:m330-w:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PROSCEND |
| cpe:2.3:o:proscend:m330-w5_firmware:1.76:*:*:*:*:*:*:* | 1.76 | Vulnerable | PROSCEND |
| cpe:2.3:h:proscend:m330-w5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PROSCEND |
| cpe:2.3:o:proscend:m301-g_firmware:1.76:*:*:*:*:*:*:* | 1.76 | Vulnerable | PROSCEND |
| cpe:2.3:h:proscend:m301-g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PROSCEND |
| cpe:2.3:o:proscend:m301-gw_firmware:1.76:*:*:*:*:*:*:* | 1.76 | Vulnerable | PROSCEND |
| cpe:2.3:h:proscend:m301-gw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PROSCEND |
| cpe:2.3:o:proscend:m560-5g_firmware:1.76:*:*:*:*:*:*:* | 1.76 | Vulnerable | PROSCEND |
| cpe:2.3:h:proscend:m560-5g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PROSCEND |
| cpe:2.3:o:proscend:m360-p_firmware:1.76:*:*:*:*:*:*:* | 1.76 | Vulnerable | PROSCEND |
| cpe:2.3:h:proscend:m360-p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PROSCEND |
| cpe:2.3:o:proscend:a551i-f1_firmware:1.76:*:*:*:*:*:*:* | 1.76 | Vulnerable | PROSCEND |
| cpe:2.3:h:proscend:a551i-f1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PROSCEND |
| cpe:2.3:o:proscend:a552i-f1_firmware:1.76:*:*:*:*:*:*:* | 1.76 | Vulnerable | PROSCEND |
| cpe:2.3:h:proscend:a552i-f1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PROSCEND |
| cpe:2.3:o:proscend:a510-f1_firmware:1.76:*:*:*:*:*:*:* | 1.76 | Vulnerable | PROSCEND |
| cpe:2.3:h:proscend:a510-f1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PROSCEND |
| cpe:2.3:o:proscend:a520i-f1_firmware:1.76:*:*:*:*:*:*:* | 1.76 | Vulnerable | PROSCEND |
| cpe:2.3:h:proscend:a520i-f1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PROSCEND |
| cpe:2.3:o:proscend:a551i-f4_firmware:1.76:*:*:*:*:*:*:* | 1.76 | Vulnerable | PROSCEND |
| cpe:2.3:h:proscend:a551i-f4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PROSCEND |
| cpe:2.3:o:proscend:a543i-l1_firmware:1.76:*:*:*:*:*:*:* | 1.76 | Vulnerable | PROSCEND |
| cpe:2.3:h:proscend:a543i-l1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PROSCEND |
| cpe:2.3:o:proscend:a510-l1_firmware:1.76:*:*:*:*:*:*:* | 1.76 | Vulnerable | PROSCEND |
| cpe:2.3:h:proscend:a510-l1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | PROSCEND |
- cpe:2.3:o:proscend:m350-w6_firmware:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·PROSCEND
- cpe:2.3:h:proscend:m350-w6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PROSCEND
- cpe:2.3:o:proscend:m331_firmware:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·PROSCEND
- cpe:2.3:h:proscend:m331:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PROSCEND
- cpe:2.3:o:proscend:m330-w_firmware:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·PROSCEND
- cpe:2.3:h:proscend:m330-w:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PROSCEND
- cpe:2.3:o:proscend:m330-w5_firmware:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·PROSCEND
- cpe:2.3:h:proscend:m330-w5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PROSCEND
- cpe:2.3:o:proscend:m301-g_firmware:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·PROSCEND
- cpe:2.3:h:proscend:m301-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PROSCEND
- cpe:2.3:o:proscend:m301-gw_firmware:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·PROSCEND
- cpe:2.3:h:proscend:m301-gw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PROSCEND
- cpe:2.3:o:proscend:m560-5g_firmware:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·PROSCEND
- cpe:2.3:h:proscend:m560-5g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PROSCEND
- cpe:2.3:o:proscend:m360-p_firmware:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·PROSCEND
- cpe:2.3:h:proscend:m360-p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PROSCEND
- cpe:2.3:o:proscend:a551i-f1_firmware:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·PROSCEND
- cpe:2.3:h:proscend:a551i-f1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PROSCEND
- cpe:2.3:o:proscend:a552i-f1_firmware:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·PROSCEND
- cpe:2.3:h:proscend:a552i-f1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PROSCEND
- cpe:2.3:o:proscend:a510-f1_firmware:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·PROSCEND
- cpe:2.3:h:proscend:a510-f1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PROSCEND
- cpe:2.3:o:proscend:a520i-f1_firmware:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·PROSCEND
- cpe:2.3:h:proscend:a520i-f1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PROSCEND
- cpe:2.3:o:proscend:a551i-f4_firmware:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·PROSCEND
- cpe:2.3:h:proscend:a551i-f4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PROSCEND
- cpe:2.3:o:proscend:a543i-l1_firmware:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·PROSCEND
- cpe:2.3:h:proscend:a543i-l1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PROSCEND
- cpe:2.3:o:proscend:a510-l1_firmware:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·PROSCEND
- cpe:2.3:h:proscend:a510-l1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·PROSCEND
Remediation
- Fix · CNA ICR Series routers FW (Proscend Advice) Fixed in Upgrade to fw version 2.24.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-3703
- 2026-10-03 Alias added: GHSA-p24j-phqw-pqf4
- 2026-11-07 EPSS moved to the 50th–90th percentile
References
Sources
- CVE-2023-3703 · CVE Program
- CVE-2023-3703 · NVD
- FIRST EPSS
- GHSA-p24j-phqw-pqf4 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences