CVE-2023-51059 is a high severity (CVSS 8.8) privilege escalation in the administrative web interface of the MOKOSmart MKGW1 BLE Gateway, version 1.1.1 and earlier. The record names no fixed version, so check with the vendor and keep the interface off untrusted networks.
What's affected
The NVD description says an issue in MOKO TECHNOLOGY LTD MOKOSmart MKGW1 BLE Gateway v1.1.1 and before allows a remote attacker to escalate privileges via the session management component of the administrative web interface. The references include a security researcher advisory titled as an improper session management issue, a vendor PDF and a Full Disclosure post.
The record has no CWE and names no fixed firmware. I did not load the references, so check with the vendor directly for a patched release.
CVSS for this entry is 8.8 (High) with vector CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
How to check if you're exposed
Read the firmware version in the gateway's administration page. Version 1.1.1 or earlier matches the record.
The NVD vector uses the adjacent network attack vector, so the attacker must be on the same network segment. Your exposure therefore depends on who can join the network where the gateway lives.
What to do now
- Inventory MKGW1 gateways and their firmware versions.
- Ask MOKOSmart whether a firmware newer than 1.1.1 addresses the session management issue.
- Put the gateway on a segment that only administrators and the devices it serves can join.
- Change administrator credentials and review who can reach the web interface.
- Run the free in-browser dependency scan at gold.safeguard.sh/scan against your manifests, and look the entry up in the Safeguard Gold directory to see how it is tracked.
Why it matters
The record lists no CWE for this entry, so the class of weakness is described only by the vendor or researcher text in the sources below.
Session management flaws let one user's session be mistaken for, or elevated to, another's. The NVD vector shows no privileges and no user interaction needed from an adjacent position, with high impact across confidentiality, integrity and availability.
Gateways bridge the physical and IT worlds. A compromised one can expose the data of whatever devices connect through it, so segmentation is worth the effort here.
The record does not mark this CVE as listed in the CISA Known Exploited Vulnerabilities catalog, and no source I read reports exploitation in the wild.
Quick check
Can this be exploited over the internet?
The vector says adjacent network, so the attacker needs to be on the same local network segment, unless the interface is bridged elsewhere.
Is a fix available?
The record does not name one. Ask the vendor.
Sources
Last reviewed: 19 October 2026.
