Lucene search

MitreCVE-2023-37058

HistoryJun 17, 2024 - 9:15 p.m.

CVE-2023-37058

2024-06-1721:15:50

mitre

web.nvd.nist.gov

vulnerability

insecure permissions

jlink unionman technology co. ltd

jlink ax1800

remote attacker

escalate privileges

crafted command

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

43.9%

JSON

Insecure Permissions vulnerability in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to escalate privileges via a crafted command.

Affected configurations

Nvd

Node

unionmanjlink_ax1800_firmwareMatch1.0

AND

unionmanjlink_ax1800

VendorProductVersionCPE
unionmanjlink_ax1800_firmware1.0cpe:2.3:o:unionman:jlink_ax1800_firmware:1.0:*:*:*:*:*:*:*
unionmanjlink_ax1800*cpe:2.3:h:unionman:jlink_ax1800:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
unionman	jlink_ax1800_firmware	1.0	cpe:2.3:o:unionman:jlink_ax1800_firmware:1.0:::::::*
unionman	jlink_ax1800	*	cpe:2.3:h:unionman:jlink_ax1800::::::::

References

jlink.com

github.com/ri5c/Jlink-Router-RCE

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

43.9%

JSON

Related for CVE-2023-37058