Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-2625
HistoryJun 28, 2023 - 5:15 p.m.

Design/Logic Flaw

2023-06-2817:15:00
PRIOn knowledge base
www.prio-n.com
1
vulnerability
coretec 4
authenticated
shell commands
web interface
design/logic flaw

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.7%

A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, having any level of access VIEWER to ADMIN. To exploit the vulnerability the attacker can inject shell commands through a particular field of the web user interface that will be executed by the system.

CPENameOperatorVersion
txpert_hub_coretec_4_firmwarelt3.0.1

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.7%

Related for PRION:CVE-2023-2625