PT-2023-18907 · Zumtobel · Zumtobel Netlink Ccd Onboard

Marco Prati · Publicado 2023-11-29 · Atualizado 2023-12-05 · CVE-2023-23325

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zumtobel Netlink CCD Onboard versions 3.74 through 3.79

Description A command injection issue was discovered via the NetHostname parameter. This allows for potential exploitation.

Recommendations For Zumtobel Netlink CCD Onboard versions 3.74 through 3.79, update to Firmware 3.80 or later to resolve the issue.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2023-23325

Produtos afetados

Zumtobel Netlink Ccd Onboard

Referências · 7

• https://osv.dev/vulnerability/CVE-2023-23325 · Aviso do Fabricante
• https://yoroi.company/en/research/cve-advisory-partial-disclosure-zumtobel-multiple-vulnerabilities · Nota
• https://t.me/cvenotify/61459 · Publicação no Telegram
• https://t.me/cvenotify/61392 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-23325 · Nota de Segurança
• https://t.me/cvenotify/62293 · Publicação no Telegram
• http://zumtobel.com · Nota