Lucene search

[email protected]NVD:CVE-2023-30297

HistoryAug 04, 2023 - 12:15 a.m.

CVE-2023-30297

2023-08-0400:15:11

[email protected]

web.nvd.nist.gov

n-able technologies

monitoring function

arbitrary code execution

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code via the monitoring function of the server.

Affected configurations

Nvd

Node

n-ablen-centralRange<2023.4

VendorProductVersionCPE
n-ablen-central*cpe:2.3:a:n-able:n-central:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
n-able	n-central	*	cpe:2.3:a:n-able:n-central::::::::

References

status.n-able.com/2023/07/27/cve-2023-30297-release-note/

www.n-able.com/

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2023-30297

cvelist1 cve1 prion1