Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-22344

Опубликовано: 06 мар. 2023
Источник: nvd
CVSS3: 9.8
EPSS Низкий

Описание

Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22336 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:dos-osaka:rakuraku_pc_cloud_agent:*:*:*:*:*:*:*:*
Версия до 2.1.8 (включая)
cpe:2.3:a:dos-osaka:ss1:*:*:*:*:*:*:*:*
Версия до 13.0.0.40 (включая)

EPSS

Процентиль: 77%
0.01052
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 9.8
github
почти 3 года назад

Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22336 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.

EPSS

Процентиль: 77%
0.01052
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-798