PT-2023-18566 · Unknown · White Rabbit Switch

Frank Breedijk + 2 · Publicado 2023-04-24 · Atualizado 2023-05-02 · CVE-2023-22581

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions White Rabbit Switch (affected versions not specified)

Description The issue allows an attacker to perform system commands under the context of the web application. By default, the web server runs as the root user, which can be exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2023-22581

Produtos afetados

White Rabbit Switch

Referências · 7

• https://t.me/cvenotify/49669 · Publicação no Telegram
• https://csirt.divd.nl/CVE-2023-22581 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-22581 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-22581 · Aviso do Fabricante
• https://t.me/cvenotify/48929 · Publicação no Telegram
• https://vuldb.com/?id.227269 · Nota
• https://csirt.divd.nl/DIVD-2022-00068 · Nota