CVE-2023-0830: medium-severity vulnerability in EasyNAS
EasyNAS backup.pl system os command injection
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
38Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 5.3epss 21%
A vulnerability classified as critical has been found in EasyNAS 1.1.0. Affected is the function system of the file /backup.pl. The manipulation leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
n/a · EasyNASpublic PoCs found — 3
cve_referencewww.exploit-db.com/exploits/51266unverifiedcve_referencegithub.com/xbz0n/CVE-2023-0830★ 1cve_referencegist.github.com/xbz0n/674af0e802efaaafe90d2f67464c2690unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.