Lucene search

MitreCVE-2023-30297

HistoryAug 04, 2023 - 12:15 a.m.

CVE-2023-30297

2023-08-0400:15:11

mitre

web.nvd.nist.gov

n-able

n-central server

cve-2023-30297

security vulnerability

arbitrary code execution

local attacker

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

Percentile

5.1%

JSON

An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring function of the server.

Affected configurations

Nvd

Node

n-ablen-centralRange<2023.4

VendorProductVersionCPE
n-ablen-central*cpe:2.3:a:n-able:n-central:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
n-able	n-central	*	cpe:2.3:a:n-able:n-central::::::::

References

status.n-able.com/2023/07/27/cve-2023-30297-release-note/

www.n-able.com/

Social References

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2023-30297