CVE-2023-43743

🗓️ 08 Dec 2023 00:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 45 Views🌐 WEB

SQL injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX3

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2023-43743	31 Dec 202310:16	–	circl
CNNVD	Zultys MX Series Security Vulnerability	8 Dec 202300:00	–	cnnvd
Cvelist	CVE-2023-43743	8 Dec 202300:00	–	cvelist
NVD	CVE-2023-43743	8 Dec 202301:15	–	nvd
Prion	Sql injection	8 Dec 202301:15	–	prion
Positive Technologies	PT-2023-28963 · Zultys · Mx30 +5	7 Dec 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-43743	9 Jan 202612:39	–	redhatcve
Vulnrichment	CVE-2023-43743	8 Dec 202300:00	–	vulnrichment

NVD

Node

zultys mx-se_firmwareRange<16.0.4

OR

zultys mx-se_firmwareRange17.0.6–17.0.10

AND

zultys mx-seMatch-

Node

zultys mx-se_ii_firmwareRange<16.0.4

OR

zultys mx-se_ii_firmwareRange17.0.6–17.0.10

AND

zultys mx-se_iiMatch-

Node

zultys mx-e_firmwareRange<16.0.4

OR

zultys mx-e_firmwareRange17.0.6–17.0.10

AND

zultys mx-eMatch-

Node

zultys mx-virtual_firmwareRange<16.0.4

OR

zultys mx-virtual_firmwareRange17.0.6–17.0.10

AND

zultys mx-virtualMatch-

Node

zultys mx250_firmwareRange<16.0.4

OR

zultys mx250_firmwareRange17.0.6–17.0.10

AND

zultys mx250Match-

Node

zultys mx30_firmwareRange<16.0.4

OR

zultys mx30_firmwareRange17.0.6–17.0.10

AND

zultys mx30Match-

Source	Link
github	www.github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0002.md
mxvirtual	www.mxvirtual.com/

Parameter	Position	Path	Description	CWE
filter	query param	/newapi/	SQL injection via filter parameter on /newapi/ endpoint in Zultys MX web interface	CWE-89

27 May 2025 16:15Current

8.9High risk

Vulners AI Score8.9

CVSS 3.18.8

EPSS0.00087

SSVC

cve-2023-43743 sql injection zultys mx-se mx-e vulnerability firmware patch nvd