Lucene search

TwcertCVELIST:CVE-2024-5403

HistoryMay 27, 2024 - 6:59 a.m.

CVE-2024-5403 ASKEY 5G NR Small Cell - Command Injection

2024-05-2706:59:23

CWE-78

twcert

www.cve.org

cve-2024-5403

askey

small cell

command injection

remote attack

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.6%

JSON

ASKEY 5G NR Small Cell fails to properly filter user input for certain functionality, allowing remote attackers with administrator privilege to execute arbitrary system commands on the remote server.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "5G NR Small Cell",
    "vendor": "ASKEY",
    "versions": [
      {
        "status": "affected",
        "version": "nsc 2.1 V6"
      }
    ]
  }
]

References

www.twcert.org.tw/tw/cp-132-7821-87e38-1.html

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.6%

JSON

Related for CVELIST:CVE-2024-5403