Lucene search

K
nvd[email protected]NVD:CVE-2023-27514
HistoryMay 23, 2023 - 2:15 a.m.

CVE-2023-27514

2023-05-2302:15:09
CWE-78
web.nvd.nist.gov
command injection
solarview compact
os vulnerability
remote attacker
authenticated
arbitrary command execution

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.7%

OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to execute an arbitrary OS command.

Affected configurations

NVD
Node
contecsv-cpt-mc310f_firmwareRange<8.10
AND
contecsv-cpt-mc310fMatch-
Node
contecsv-cpt-mc310_firmwareRange<8.10
AND
contecsv-cpt-mc310Match-

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.7%

Related for NVD:CVE-2023-27514