PT-2023-26722 · Douran · Douran Dsgate

Alireza Mostamea + 1 · Published 2023-08-22 · Updated 2023-08-28 · CVE-2023-38996

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Douran DSGate versions (all)

Description The issue allows a local authenticated privileged attacker to execute arbitrary code via the debug command.

Recommendations For all versions, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-38996

Affected Products

Douran Dsgate

References · 4

• 🔥 https://gist.github.com/RNPG/53b579da330ba896aa8dc2d901e5e400 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-38996 · Security Note
• https://douran.com/fa-IR/Dourtal/4797/page/DSGate · Note
• https://douran.com/en-US/Dourtal/4797/page/DSGate · Note