Lucene search

[email protected]CVE-2023-1082

HistoryApr 09, 2024 - 9:15 a.m.

CVE-2023-1082

2024-04-0909:15:19

CWE-78

[email protected]

web.nvd.nist.gov

remote attacker

command injection

root access

nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.6%

JSON

An remote attacker with low privileges can perform a command injection which can lead to root access.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "TK515L",
    "vendor": "Welotec",
    "versions": [
      {
        "lessThan": "v2.3.0.r5542",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TK515L Set",
    "vendor": "Welotec",
    "versions": [
      {
        "lessThan": "v2.3.0.r5542",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TK515L-W",
    "vendor": "Welotec",
    "versions": [
      {
        "lessThan": "v2.3.0.r5542",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TK515L-W Set",
    "vendor": "Welotec",
    "versions": [
      {
        "lessThan": "v2.3.0.r5542",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TK525L",
    "vendor": "Welotec",
    "versions": [
      {
        "lessThan": "v2.3.0.r5542",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TK525L Set",
    "vendor": "Welotec",
    "versions": [
      {
        "lessThan": "v2.3.0.r5542",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TK525L-W",
    "vendor": "Welotec",
    "versions": [
      {
        "lessThan": "v2.3.0.r5542",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TK525L-W Set",
    "vendor": "Welotec",
    "versions": [
      {
        "lessThan": "v2.3.0.r5542",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TK525U",
    "vendor": "Welotec",
    "versions": [
      {
        "lessThan": "v2.3.0.r5542",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TK525U Set",
    "vendor": "Welotec",
    "versions": [
      {
        "lessThan": "v2.3.0.r5542",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TK525W",
    "vendor": "Welotec",
    "versions": [
      {
        "lessThan": "v2.3.0.r5542",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TK525W Set",
    "vendor": "Welotec",
    "versions": [
      {
        "lessThan": "v2.3.0.r5542",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TK535L1",
    "vendor": "Welotec",
    "versions": [
      {
        "lessThan": "v2.3.0.r5542",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "TK535L1 Set",
    "vendor": "Welotec",
    "versions": [
      {
        "lessThan": "v2.3.0.r5542",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

References

cert.vde.com/en/advisories/VDE-2024-009

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.6%

JSON

Related for CVE-2023-1082

cvelist1 nvd1