CVE-2023-47246criticalunder attackransomwareCWE-22

CVE-2023-47246

Published · Updated

Follow this CVE+ Monitor SysAid Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 99%
from disclosure to weapon7 days
Published on NVDNov 10
1st PoC+7d
CISA KEV+3d
Action required by CISAfederal deadline: 2023-12-04

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

SysAid On-Premise versions before 23.3.36 allow attackers to write files anywhere on the server by manipulating file paths, which can lead to executing malicious code on the affected system.

Technical detail

A path traversal vulnerability (CWE-22) in SysAid On-Premise before 23.3.36 permits unauthenticated attackers to bypass directory restrictions and write arbitrary files to the Tomcat webroot, enabling remote code execution. This vulnerability was actively exploited in the wild during November 2023.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited in the wild in November 2023.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.