PT-2023-6758 · Contec · Contec Solarview Compact

Atonysan · Publicado 2023-10-27 · Atualizado 2024-09-12 · CVE-2023-46509

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Contec SolarView Compact versions 6.0 and earlier

Description The issue is related to incorrect code generation management in the texteditor.php component of the Contec SolarView Compact software, which can allow an attacker to execute arbitrary code. This can be exploited by a remote attacker. The texteditor.php component is specifically mentioned as the vulnerable part of the software.

Recommendations For Contec SolarView Compact versions 6.0 and earlier, consider disabling the texteditor.php component as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

BDU:2023-07549

CVE-2023-46509

Produtos afetados

Contec Solarview Compact

Referências · 7

• 🔥 https://gist.github.com/ATonysan/d6f72e9eb90407d64bed4566aa80afb1#file-cve-2023-46509 · Exploit
• https://osv.dev/vulnerability/CVE-2023-46509 · Aviso do Fabricante
• https://t.me/cibsecurity/73087 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-46509 · Nota de Segurança
• https://safe-surf.ru/upload/VULN-new/VULN.2023-11-01.1.pdf · Nota de Segurança
• https://twitter.com/CVEnew/status/1718008044368417161 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2023-07549 · Nota de Segurança