PT-2023-24277 · Unknown · Perimeter81

Nsecho · Publicado 2023-06-30 · Atualizado 2024-11-27 · CVE-2023-33298

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Perimeter81 version 10.0.0.19

Description The issue allows Local Privilege Escalation to root via shell metacharacters in usingCAPath.

Recommendations For Perimeter81 version 10.0.0.19, consider restricting access to the usingCAPath until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2023-33298

Produtos afetados

Perimeter81

Referências · 9

• 🔥 https://ns-echo.com/posts/cve_2023_33298.html · Exploit
• https://t.me/cvenotify/53476 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-33298 · Aviso do Fabricante
• https://t.me/cvenotify/53907 · Publicação no Telegram
• https://twitter.com/CyberWarship/status/1689238345711255552 · Publicação no Twitter
• https://kb.cert.org/vuls/id/653767 · Nota
• https://t.me/cvenotify/102639 · Publicação no Telegram
• https://support.perimeter81.com/docs/macos-agent-release-notes · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-33298 · Nota de Segurança