PT-2023-21191 · Unknown · Solarview Compact Sv-Cpt-Mc310

Sma11New · Publicado 2023-05-23 · Atualizado 2025-01-31 · CVE-2023-27521

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 SolarView Compact SV-CPT-MC310F versions prior to Ver.8.10

Description The issue allows remote authenticated attackers to execute an arbitrary OS command due to an OS command injection vulnerability in the mail setting page.

Recommendations For SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10, update to Ver.8.10 or later. For SolarView Compact SV-CPT-MC310F versions prior to Ver.8.10, update to Ver.8.10 or later.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2023-27521

Produtos afetados

Solarview Compact Sv-Cpt-Mc310

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-27521 · Nota de Segurança
• https://contec.com/jp/download/donwload-list/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e#firmware · Aviso do Fabricante
• https://t.me/cvenotify/50965 · Publicação no Telegram
• https://contec.com/jp/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_solarview_230508.pdf · Aviso do Fabricante
• https://t.me/cvenotify/109415 · Publicação no Telegram
• https://t.me/cvenotify/51376 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-27521 · Aviso do Fabricante
• https://jvn.jp/en/vu/JVNVU92106300 · Nota