Lucene search

K
cve[email protected]CVE-2023-2625
HistoryJun 28, 2023 - 5:15 p.m.

CVE-2023-2625

2023-06-2817:15:10
CWE-78
web.nvd.nist.gov
11
cve-2023-2625
coretec 4
vulnerability
authenticated client
shell commands
web user interface
nvd

9 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.6%

A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, having any level of access VIEWER to ADMIN. To exploit the vulnerability the attacker can inject shell commands through a particular field of the web user interface that will be executed by the system.

Affected configurations

NVD
Node
abbtxpert_hub_coretec_4Match-
AND
abbtxpert_hub_coretec_4_firmwareRange<3.0.1

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "TXpert Hub CoreTec 4",
    "vendor": "Hitachi Energy",
    "versions": [
      {
        "status": "affected",
        "version": "TXpert Hub CoreTec 4 version 2.0.*"
      },
      {
        "status": "affected",
        "version": "TXpert Hub CoreTec 4 version 2.1.*"
      },
      {
        "status": "affected",
        "version": "TXpert Hub CoreTec 4 version 2.2.*"
      },
      {
        "status": "affected",
        "version": "TXpert Hub CoreTec 4 version 2.3.*"
      },
      {
        "status": "affected",
        "version": "TXpert Hub CoreTec 4 version 2.4.*"
      },
      {
        "status": "unaffected",
        "version": "TXpert Hub CoreTec 4 version 3.0.1"
      }
    ]
  }
]

9 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.6%

Related for CVE-2023-2625