CVE-2023-36177

Опубликовано: 23 янв. 2024

Источник: nvd

CVSS3: 9.8

EPSS Средний

Описание

An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API.

Ссылки

http://snapcast.com
Broken Link
https://oxnan.com/posts/Snapcast_jsonrpc_rce
Exploit
Third Party Advisory
http://snapcast.com
Broken Link
https://lists.debian.org/debian-lts-announce/2025/07/msg00015.html
https://oxnan.com/posts/Snapcast_jsonrpc_rce
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:badaix:snapcast:*:*:*:*:*:*:*:*

Версия до 0.27.0 (включая)

EPSS

Процентиль: 96%

0.29015

Средний

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-94

Связанные уязвимости

CVE-2023-36177

CVSS3: 9.8

ubuntu

около 2 лет назад

An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API.

CVE-2023-36177

CVSS3: 9.8

debian

около 2 лет назад

An issue was discovered in badaix Snapcast version 0.27.0, allows remo ...

GHSA-hgrc-r3ff-wxfq

CVSS3: 9.8

github

около 2 лет назад

An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API.

EPSS

Процентиль: 96%

0.29015

Средний

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-94