# CVE-2023-0750

## Summary

- **CVE ID:** CVE-2023-0750
- **Severity:** CRITICAL
- **CVSS Score:** 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
- **CWE:** CWE-602
- **Published:** Apr 6, 2023
- **Last Modified:** Mar 13, 2026

## Description

Yellobrik PEC-1864 implements authentication checks via javascript in the frontend interface.  When the device can be accessed over the network an attacker could bypass authentication.




This would allow an attacker to : 
- Change the password, resulting in a DOS of the users

- Change the streaming source, compromising the integrity of the stream

- Change the streaming destination, compromising the confidentiality of the stream








This issue affects Yellowbrik: PEC 1864. No patch has been issued by the manufacturer as this model was discontinued.

## Affected Products

- Lynx Technik AG — Yellowbrik (PEC 1864)

## References

- [CNA](https://support.lynx-technik.com/support/solutions/articles/1000317081-pec-1864-web-ui-for-configuration)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.07%
- **EPSS Percentile:** 20.2

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._