PT-2023-4506 · Netmodule · Netmodule Nsrw

Q. Kaiser

+1

·

Publicado

2023-02-16

·

Atualizado

2024-09-12

·

CVE-2023-0861

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions NetModule NSRW versions 4.3.0.0 through 4.3.0.118 NetModule NSRW versions 4.4.0.0 through 4.4.0.117 NetModule NSRW versions 4.6.0.0 through 4.6.0.104 NetModule NSRW versions 4.7.0.0 through 4.7.0.102
Description The NetModule NSRW web administration interface executes an OS command constructed with unsanitized user input. A successful exploit could allow an authenticated user to execute arbitrary commands with elevated privileges.
Recommendations For versions 4.3.0.0 through 4.3.0.118, update to version 4.3.0.119 or later. For versions 4.4.0.0 through 4.4.0.117, update to version 4.4.0.118 or later. For versions 4.6.0.0 through 4.6.0.104, update to version 4.6.0.105 or later. For versions 4.7.0.0 through 4.7.0.102, update to version 4.7.0.103 or later.

Exploit

Correção

OS Command Injection

Command Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-78CWE-77

Identificadores relacionados

BDU:2023-04909
CVE-2023-0861

Produtos afetados

Netmodule Nsrw