Lucene search

K
nvd[email protected]NVD:CVE-2023-3656
HistoryOct 03, 2023 - 8:15 a.m.

CVE-2023-3656

2023-10-0308:15:35
CWE-749
CWE-94
web.nvd.nist.gov
4
pos devices
remote code execution
unauthenticated vulnerability
network exposure

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.9

Confidence

High

EPSS

0.014

Percentile

86.8%

cashIT! - serving solutions. Devices from “PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH” to 03.A06rks 2023.02.37 are affected by an unauthenticated remote code execution vulnerability. This vulnerability can be triggered by an HTTP endpoint exposed to the network.

Affected configurations

Nvd
Node
cashitcashit\!Range03.a06rks_2023.02.37
VendorProductVersionCPE
cashitcashit\!*cpe:2.3:a:cashit:cashit\!:*:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.9

Confidence

High

EPSS

0.014

Percentile

86.8%

Related for NVD:CVE-2023-3656