CVE-2023-51947

Опубликовано: 19 янв. 2024

Источник: nvd

CVSS3: 9.1

EPSS Низкий

Описание

Improper access control on nasSvr.php in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to read and modify different types of data without authentication.

Ссылки

http://actinas-plus-sl-2u-8-rdx.com
Broken Link
https://github.com/saw-your-packet/CVEs/blob/main/CVE-2023-51947/README.md
Exploit
Third Party Advisory
https://www.actidata.com/index.php/de-de/actinas-plus-sl-2u-8-rdx
Product
http://actinas-plus-sl-2u-8-rdx.com
Broken Link
https://github.com/saw-your-packet/CVEs/blob/main/CVE-2023-51947/README.md
Exploit
Third Party Advisory
https://www.actidata.com/index.php/de-de/actinas-plus-sl-2u-8-rdx
Product

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:actidata:actinas_sl_2u-8_rdx_firmware:3.2.03:sp1:*:*:*:*:*:*

cpe:2.3:h:actidata:actinas_sl_2u-8_rdx:-:*:*:*:*:*:*:*

EPSS

Процентиль: 56%

0.00339

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-306

Связанные уязвимости

GHSA-2cq5-qqj9-pr9m