PT-2023-29553 · Beijing Baichuo · Beijing Baichuo Smart S85F Management Platform

Hutianshuai · Published 2023-08-26 · Updated 2024-05-17 · CVE-2023-4546

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Beijing Baichuo Smart S85F Management Platform versions up to 20230816

Description A vulnerability was found in the Beijing Baichuo Smart S85F Management Platform, affecting an unknown functionality of the file /sysmanage/licence.php. The manipulation leads to improper access controls. The exploit has been disclosed to the public and may be used.

Recommendations For versions up to 20230816, as a temporary workaround, consider restricting access to the /sysmanage/licence.php file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2023-4546

Affected Products

Beijing Baichuo Smart S85F Management Platform

References · 10

• 🔥 https://github.com/hutianshuai/CVE/blob/main/information_disclosure.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-4546 · Security Note
• https://osv.dev/vulnerability/CVE-2023-4546 · Vendor Advisory
• https://vuldb.com/?id.238057 · Note
• https://twitter.com/CVEnew/status/1695635342643417241 · Twitter Post
• https://vuldb.com/?submit.195836 · Note
• https://t.me/cvenotify/57380 · Telegram Post
• https://t.me/cibsecurity/69239 · Telegram Post
• https://vuldb.com/?ctiid.238057 · Note
• https://twitter.com/VulmonFeeds/status/1695383019102572926 · Twitter Post