Lucene search

MitreCVE-2023-25266

HistoryFeb 28, 2023 - 4:15 p.m.

CVE-2023-25266

2023-02-2816:15:09

mitre

web.nvd.nist.gov

docmosis tornado

cve-2023-25266

rce

nvd

security vulnerability

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.003

Percentile

66.4%

JSON

An issue was discovered in Docmosis Tornado prior to version 2.9.5. An authenticated attacker can change the Office directory setting pointing to an arbitrary remote network path. This triggers the execution of the soffice binary under the attackers control leading to arbitrary remote code execution (RCE).

Affected configurations

Nvd

Node

docmosistornadoRange<2.9.5

VendorProductVersionCPE
docmosistornado*cpe:2.3:a:docmosis:tornado:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
docmosis	tornado	*	cpe:2.3:a:docmosis:tornado::::::::

References

frycos.github.io/vulns4free/2023/01/24/0days-united-nations.html

resources.docmosis.com/content/documentation/tornado-v2-9-5-release-notes

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.8

Confidence

High

EPSS

0.003

Percentile

66.4%

JSON

Related for CVE-2023-25266