Lucene search

K
nvd[email protected]NVD:CVE-2023-27521
HistoryMay 23, 2023 - 2:15 a.m.

CVE-2023-27521

2023-05-2302:15:09
CWE-78
web.nvd.nist.gov
command injection
solarview compact
os command
vulnerability
authenticated attackers
remote execution

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.7%

OS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows remote authenticated attackers to execute an arbitrary OS command.

Affected configurations

NVD
Node
contecsv-cpt-mc310f_firmwareRange<8.10
AND
contecsv-cpt-mc310fMatch-
Node
contecsv-cpt-mc310_firmwareRange<8.10
AND
contecsv-cpt-mc310Match-

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.7%

Related for NVD:CVE-2023-27521