Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-4120
HistoryAug 03, 2023 - 9:15 a.m.

Command injection

2023-08-0309:15:00
PRIOn knowledge base
www.prio-n.com
8
vulnerability
beijing baichuo smart s85f
management platform
20230722
critical
command injection
importhtml.php
remote attack
public disclosure
identifier
vdb-235967
non-responsive

9.8 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.9%

A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230722 and classified as critical. This issue affects some unknown processing of the file importhtml.php. The manipulation of the argument sql leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235967. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CPENameOperatorVersion
smart_s85fle20230722

9.8 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.9%

Related for PRION:CVE-2023-4120