CVE-2023-45467

2023-10-1313:15:12

CWE-78

[email protected]

web.nvd.nist.gov

cve-2023-45467

netis

command injection

time settings

vulnerability

ntpservip parameter

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

46.9%

JSON

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings.

Affected configurations

Nvd

Node

netis-systemsn3m_firmwareMatch1.0.1.865

AND

netis-systemsn3mMatchv2

VendorProductVersionCPE
netis-systemsn3m_firmware1.0.1.865cpe:2.3:o:netis-systems:n3m_firmware:1.0.1.865:*:*:*:*:*:*:*
netis-systemsn3mv2cpe:2.3:h:netis-systems:n3m:v2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netis-systems	n3m_firmware	1.0.1.865	cpe:2.3:o:netis-systems:n3m_firmware:1.0.1.865:::::::*
netis-systems	n3m	v2	cpe:2.3:h:netis-systems:n3m:v2:::::::*