PT-2023-27704 · Unknown · Solarview Compact

Ye · Published 2023-09-08 · Updated 2026-04-07 · CVE-2023-40924

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SolarView Compact versions prior to 6.00

Description SolarView Compact versions prior to 6.00 are vulnerable to Directory Traversal. This allows unauthorized access to files and directories on the system. The vulnerability is due to insufficient validation of file paths.

Recommendations Update SolarView Compact to version 6.00 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-40924

Affected Products

Solarview Compact

References · 8

• 🔥 https://github.com/Yobing1/CVE-2023-40924/blob/main/README.md · Exploit
• https://osv.dev/vulnerability/CVE-2023-40924 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-33620 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-40924 · Security Note
• https://t.me/cibsecurity/70144 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1700159170928886150 · Twitter Post
• https://twitter.com/pdnuclei_bot/status/2041320080374698031 · Twitter Post
• https://twitter.com/CVEnew/status/1700130020403097930 · Twitter Post