CVE-2023-51633 Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability

🗓️ 03 May 2024 02:15:50Reported by zdiType

Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. User interaction is required to exploit this vulnerability. The specific flaw exists within the processing of the sysName OID in SNMP. The issue results from the lack of proper validation of user-supplied data, which can lead to the injection of an arbitrary script. An attacker can leverage this vulnerability to execute code in the context of the service account.

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2023-51633	3 May 202403:16	–	attackerkb
CNNVD	Centreon 安全漏洞	3 May 202400:00	–	cnnvd
CVE	CVE-2023-51633	3 May 202402:15	–	cve
EUVD	EUVD-2023-56345	3 Oct 202520:07	–	euvd
NVD	CVE-2023-51633	3 May 202403:16	–	nvd
Positive Technologies	PT-2024-14213 · Centreon · Centreon	29 Apr 202400:00	–	ptsecurity
Vulnrichment	CVE-2023-51633 Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability	3 May 202402:15	–	vulnrichment
Zero Day Initiative	Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability	29 Apr 202400:00	–	zdi

[
  {
    "vendor": "Centreon",
    "product": "Centreon",
    "versions": [
      {
        "version": "23.04",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-416/

03 May 2024 02:15Current

7.8High risk

Vulners AI Score7.8

CVSS 37.5

EPSS0.02223

CWE-79