Lucene search

K
cvelistTwcertCVELIST:CVE-2023-28701
HistoryJun 02, 2023 - 12:00 a.m.

CVE-2023-28701 ELITE Web Fax - SQL Injection

2023-06-0200:00:00
CWE-89
twcert
www.cve.org
cve-2023-28701
elite technology corp
web fax
sql injection
remote attacker
arbitrary system commands
disrupt service
terminate service

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.6%

ELITE TECHNOLOGY CORP. Web Fax has a vulnerability of SQL Injection. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to perform arbitrary system commands, disrupt service or terminate service.

CNA Affected

[
  {
    "vendor": "ELITE",
    "product": "Web Fax",
    "versions": [
      {
        "version": "0",
        "status": "unknown"
      }
    ]
  }
]

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.6%

Related for CVELIST:CVE-2023-28701