CVE-2023-46055

2023-10-2100:00:00

mitre

www.cve.org

cve-2023-46055

thingnario photon

remote code execution

crafted script

ping function

escalation of privileges

logger maintenance webpage

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

51.2%

JSON

An issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the ping function to the “thingnario Logger Maintenance Webpage” endpoint.

References

gist.github.com/GroundCTL2MajorTom/eef0d55f5df77cc911d84392acdbf625