CVE-2023-4873: fallo de gravedad media en Byzoro Smart S45F Multi-Service Secure Gateway…
Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform importexport.php os command injection
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
18Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.3epss 22%
A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-239358 is the identifier assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVEs relacionadas — Byzoro Smart S45F Multi-Service Secure Gateway…
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-5494MEDIUMByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform download.php os command injectionEPSS 7.7%CVE-2023-5492MEDIUMByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform licence.php unrestricted uploadEPSS 2.1%CVE-2023-5488MEDIUMByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform updatelib.php unrestricted uploadEPSS 2.1%CVE-2023-5493MEDIUMByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform web.php unrestricted uploadEPSS 2.0%CVE-2023-5491MEDIUMByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform updatelib.php unrestricted uploadEPSS 2.0%CVE-2023-5490MEDIUMByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform userattestation.php unrestricted uploadEPSS 2.0%