Lucene search

K
nvd[email protected]NVD:CVE-2023-29862
HistoryMay 15, 2023 - 1:15 p.m.

CVE-2023-29862

2023-05-1513:15:10
web.nvd.nist.gov
1
agasio-camera
remote attacker
execute arbitrary code
check parameter
authlevel parameter

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.007

Percentile

80.4%

An issue found in Agasio-Camera device version not specified allows a remote attacker to execute arbitrary code via the check and authLevel parameters.

Affected configurations

Nvd
Node
agasio_camera_projectagasio_camera_firmwareMatch-
AND
agasio_camera_projectagasio_cameraMatch-
VendorProductVersionCPE
agasio_camera_projectagasio_camera_firmware-cpe:2.3:o:agasio_camera_project:agasio_camera_firmware:-:*:*:*:*:*:*:*
agasio_camera_projectagasio_camera-cpe:2.3:h:agasio_camera_project:agasio_camera:-:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.007

Percentile

80.4%

Related for NVD:CVE-2023-29862