PT-2023-21191 · Unknown · Solarview Compact Sv-Cpt-Mc310

Sma11New · Published 2023-05-23 · Updated 2025-01-31 · CVE-2023-27521

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 SolarView Compact SV-CPT-MC310F versions prior to Ver.8.10

Description The issue allows remote authenticated attackers to execute an arbitrary OS command due to an OS command injection vulnerability in the mail setting page.

Recommendations For SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10, update to Ver.8.10 or later. For SolarView Compact SV-CPT-MC310F versions prior to Ver.8.10, update to Ver.8.10 or later.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2023-27521

Affected Products

Solarview Compact Sv-Cpt-Mc310

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-27521 · Security Note
• https://contec.com/jp/download/donwload-list/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e#firmware · Vendor Advisory
• https://contec.com/jp/api/downloadlogger?download=/-/media/Contec/jp/support/security-info/contec_security_solarview_230508.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-27521 · Vendor Advisory
• https://t.me/cvenotify/50965 · Telegram Post
• https://t.me/cvenotify/109415 · Telegram Post
• https://t.me/cvenotify/51376 · Telegram Post
• https://jvn.jp/en/vu/JVNVU92106300 · Note