Lucene search
+L

27 matches found

Cvelist
Cvelist
added 2023/11/15 4:22 p.m.29 views

CVE-2023-33873 AVEVA Operations Control Logger Execution with Unnecessary Privileges

This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where these products are installed, resulting in complete compromise of the target machine...

7.8CVSS8.1AI score0.00236EPSS
SaveExploits0References2
CVE
CVE
added 2023/11/15 4:22 p.m.86 views

CVE-2023-33873

CVE-2023-33873 describes a local privilege-escalation on AVEVA Operations Control Logger and related AVEVA products (e.g., AVEVA System Platform, Historian, Application Server, InTouch, and more listed in the ICS advisory). The vulnerability allows a local OS-authenticated user with standard priv...

7.8CVSS7.9AI score0.00236EPSS
SaveExploits0References2Affected Software13
Circl
Circl
added 2022/10/10 10:25 a.m.10 views

CVE-2022-33873

creationtimestamp| type| source ---|---|--- 2022-10-10 10:25:16+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus16/2022 2022-10-18 18:14:25+00:00| seen| https://t.me/cibsecurity/51681...

9.8CVSS8.7AI score0.02574EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/10/10 12:00 a.m.12 views

CVE-2022-33873

An improper neutralization of special elements used in an OS Command 'OS Command Injection' vulnerabilities CWE-78 in Console login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated attacker to execute arbitrary command in the...

6.8CVSS8AI score0.02574EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/10/10 12:00 a.m.42 views

CVE-2022-33873

An improper neutralization of special elements used in an OS Command 'OS Command Injection' vulnerabilities CWE-78 in Console login components of FortiTester 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow an unauthenticated attacker to execute arbitrary command in the...

6.8CVSS10AI score0.02574EPSS
SaveExploits0References1
CVE
CVE
added 2022/10/10 12:00 a.m.89 views

CVE-2022-33873

CVE-2022-33873 describes an OS command injection in FortiTester Console login components due to improper neutralization of special elements. Affected FortiTester versions: 2.3.0–3.9.1, 4.0.0–4.2.0, and 7.0.0–7.1.0. Unauthenticated attackers could execute arbitrary commands in the underlying shell...

9.8CVSS9.9AI score0.02574EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2019/08/07 12:00 a.m.11 views

cPanel Formatting String Error Vulnerability (CNVD-2019-33873)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A formatting string error vulnerability exists in cPanel. Detailed vulnerability details are not available at this time...

8.8CVSS6.8AI score0.01054EPSS
SaveExploits0References1
Rows per page
Query Builder