Command injection

2023-08-0316:15:00

PRIOn knowledge base

www.prio-n.com

os command injection

suprema biostar 2

v2.9.1

authenticated users

arbitrary commands

server

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.8%

JSON

An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which allows authenticated users to execute arbitrary OS commands on the BioStar 2 server.

CPENameOperatorVersion
biostar_2lt2.9.1

CPE	Name	Operator	Version
	biostar_2	lt	2.9.1

References

claroty.com/team82/disclosure-dashboard/cve-2023-33364

kb.supremainc.com/knowledge/doku.php?id=en:release_note_291