CVE-2023-31446

Опубликовано: 10 янв. 2024

Источник: nvd

CVSS3: 9.8

EPSS Критический

Описание

In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This leads to injecting Bash code and executing it with root privileges on device startup.

Ссылки

https://blog.kscsc.online/cves/202331446/md.html
https://github.com/Dodge-MPTC/CVE-2023-31446-Remote-Code-Execution
Exploit
Third Party Advisory
https://www.cassianetworks.com
Product
https://blog.kscsc.online/cves/202331446/md.html
https://github.com/Dodge-MPTC/CVE-2023-31446-Remote-Code-Execution
Exploit
Third Party Advisory
https://www.cassianetworks.com
Product

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:cassianetworks:xc1000_firmware:2.1.1.2303082218:*:*:*:*:*:*:*

cpe:2.3:h:cassianetworks:xc1000:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:cassianetworks:xc2000_firmware:2.1.1.2303090947:*:*:*:*:*:*:*

cpe:2.3:h:cassianetworks:xc2000:-:*:*:*:*:*:*:*

EPSS

Процентиль: 100%

0.92671

Критический

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-77

Связанные уязвимости

GHSA-89ph-wr9x-hcfc

CVSS3: 9.8

github

около 2 лет назад

BDU:2024-00268

CVSS3: 8

fstec