PT-2023-25088 · Unknown · Rts Vlink Virtual Matrix

Published 2023-09-18 · Updated 2023-09-19 · CVE-2023-34999

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RTS VLink Virtual Matrix Software versions 5.0 through 5.7.5 RTS VLink Virtual Matrix Software versions 6.0 through 6.4.9

Description A command injection issue exists that allows an attacker to perform arbitrary code execution via the admin web interface.

Recommendations For versions 5.0 through 5.7.5, update to version 5.7.6 or later. For versions 6.0 through 6.4.9, update to version 6.5.0 or later.

Fix

Command Injection

Code Injection

Weakness Enumeration

CWE-77

CWE-94

Related Identifiers

CVE-2023-34999

Affected Products

Rts Vlink Virtual Matrix

References · 5

• https://osv.dev/vulnerability/CVE-2023-34999 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-34999 · Security Note
• https://psirt.bosch.com/security-advisories/BOSCH-SA-893251-BT.html · Vendor Advisory
• https://twitter.com/cracbot/status/1704012487241367605 · Twitter Post
• https://t.me/cibsecurity/70646 · Telegram Post