PT-2023-22625 · Alt N Technologies · N-Central Server

Published 2023-08-03 · Updated 2023-08-09 · CVE-2023-30297

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions N-able Technologies N-central Server versions prior to 2023.4

Description The issue allows a local attacker to execute arbitrary code via the monitoring function of the server.

Recommendations For versions prior to 2023.4, update to version 2023.4 or later to resolve the issue.

Fix

Related Identifiers

CVE-2023-30297

Affected Products

N-Central Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-30297 · Security Note
• https://osv.dev/vulnerability/CVE-2023-30297 · Vendor Advisory
• https://status.n-able.com/2023/07/27/cve-2023-30297-release-note · Note
• https://n-able.com · Note
• https://t.me/cibsecurity/67749 · Telegram Post