CVE-2023-33443

2023-06-0800:00:00

mitre

www.cve.org

access control

administrative functionalities

bes-6024pb-i50h1

videoplaytool

arbitrary commands

AI Score

9.8

Confidence

High

EPSS

0.003

Percentile

71.5%

JSON

Incorrect access control in the administrative functionalities of BES–6024PB-I50H1 VideoPlayTool v2.0.1.0 allow attackers to execute arbitrary administrative commands via a crafted payload sent to the desired endpoints.

References

gitlab.com/FallFur/exploiting-unprotected-admin-funcionalities-on-besder-ip-cameras/