Lucene search
HistoryJan 25, 2024 - 7:15 p.m.
CVE-2023-7227
systemk
nvr
command injection
dynamic domain name system
ddns
root privileges
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
41.2%
SystemK NVR 504/508/516 versions 2.3.5SK.30084998 and prior are vulnerable to a command injection vulnerability in the dynamic domain name system (DDNS) settings that could allow an attacker to execute arbitrary commands with root privileges.
Affected configurations
Node
systemk-corpnvr_504Match-
systemk-corpnvr_504_firmwareMatch2.3.5sk.30084998
Node
systemk-corpnvr_508Match-
systemk-corpnvr_508_firmwareMatch2.3.5sk.30084998
Node
systemk-corpnvr_516Match-
systemk-corpnvr_516_firmwareMatch2.3.5sk.30084998
Related
cvelist
cvelist
CVE-2023-7227 Command Injection vulnerability in SystemK NVR 504/508/516
2024-01-25 18:21:39
ics
ics
SystemK NVR 504/508/516
2024-01-25 12:00:00
cve
cve
CVE-2023-7227
2024-01-25 19:15:08
prion
prion
Command injection
2024-01-25 19:15:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
41.2%
Related for NVD:CVE-2023-7227