CVE-2023-29861

Опубликовано: 15 мая 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

An issue found in FLIR-DVTEL version not specified allows a remote attacker to execute arbitrary code via a crafted request to the management page of the device.

Ссылки

https://github.com/Duke1410/CVE/blob/main/CVE-2023-29861
Third Party Advisory
https://woolly-espadrille-ed5.notion.site/The-FLIR-DVTEL-camera-device-has-a-logic-flaw-vulnerability-363a2158e372440b80a2be739271c6f3
Exploit
Third Party Advisory
https://github.com/Duke1410/CVE/blob/main/CVE-2023-29861
Third Party Advisory
https://woolly-espadrille-ed5.notion.site/The-FLIR-DVTEL-camera-device-has-a-logic-flaw-vulnerability-363a2158e372440b80a2be739271c6f3
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:flir:dvtel_camera_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:flir:dvtel_camera:-:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.01973

Низкий

9.8 Critical

CVSS3

Дефекты

NVD-CWE-Other

CWE-94

Связанные уязвимости

GHSA-9ww8-p9mv-xgqx