CVE-2023-27514

🗓️ 23 May 2023 00:00:00Reported by jpcertType

OS command injection vuln. in SolarView Compact SV-CPT-MC310 < Ver.8.10 allows remote authenticated attacker to execute OS command

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2023-27514	23 May 202302:15	–	attackerkb
Circl	CVE-2023-27514	23 May 202307:30	–	circl
CNNVD	Contec SolarView Compact 操作系统命令注入漏洞	23 May 202300:00	–	cnnvd
Cvelist	CVE-2023-27514	23 May 202300:00	–	cvelist
EUVD	EUVD-2023-31276	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in SolarView Compact	9 May 202307:09	–	jvn
NVD	CVE-2023-27514	23 May 202302:15	–	nvd
Prion	Command injection	23 May 202302:15	–	prion
Positive Technologies	PT-2023-21185 · Unknown · Solarview Compact Sv-Cpt-Mc310	23 May 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-27514	23 May 202502:26	–	redhatcve

NVD

Vulners

Node

contec sv-cpt-mc310f_firmwareRange<8.10

AND

contec sv-cpt-mc310fMatch-

Node

contec sv-cpt-mc310_firmwareRange<8.10

AND

contec sv-cpt-mc310Match-

[
  {
    "vendor": "Contec Co., Ltd.",
    "product": "SolarView Compact",
    "versions": [
      {
        "version": "SV-CPT-MC310 versions prior to Ver.8.10, and SV-CPT-MC310F versions prior to Ver.8.10",
        "status": "affected"
      }
    ]
  }
]

Source	Link
contec	www.contec.com/jp/download/donwload-list/
contec	www.contec.com/jp/api/downloadlogger
jvn	www.jvn.jp/en/vu/JVNVU92106300/

16 Jan 2025 20:15Current

8.6High risk

Vulners AI Score8.6

CVSS 3.18.8

EPSS0.03613

SSVC

CWE-78