PT-2024-13448 · Cypress Solutions · Ctm-200

Published 2024-03-07 · Updated 2025-09-18 · CVE-2023-47415

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cypress Solutions CTM-200 versions 2.7.1.5600 and below

Description The issue is related to an OS command injection vulnerability. This vulnerability can be exploited via the cli text parameter.

Recommendations For versions 2.7.1.5600 and below, avoid using the cli text parameter until a fix is available. As a temporary workaround, consider restricting access to the vulnerable parameter to minimize the risk of exploitation.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2023-47415

Affected Products

Ctm-200

References · 8

• 🔥 https://gitlab.com/loudmouth-security/vulnerability-disclosures/cve-2023-47415 · Exploit
• https://osv.dev/vulnerability/CVE-2023-47415 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-47415 · Security Note
• https://t.me/cvenotify/73192 · Telegram Post
• http://cypress.com · Note
• http://ctm-200.com · Note
• https://t.me/cvenotify/73259 · Telegram Post
• https://t.me/cveNotify/135826 · Telegram Post