CVE-2023-5684: fallo de gravedad media en Byzoro Smart S85F Management Platform
Byzoro Smart S85F Management Platform importexport.php os command injection
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
18Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.7epss 27%
A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231012. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /importexport.php. The manipulation leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-243061 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Productos afectados
Byzoro · Smart S85F Management PlatformCVEs relacionadas — Byzoro Smart S85F Management Platform
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-4120MEDIUMByzoro Smart S85F Management Platform importhtml.php command injectionEPSS 62.3%CVE-2023-5683MEDIUMByzoro Smart S85F Management Platform importconf.php os command injectionEPSS 9.3%CVE-2023-4414MEDIUMByzoro Smart S85F Management Platform decodmail.php command injectionEPSS 9.1%CVE-2023-4739MEDIUMByzoro Smart S85F Management Platform updateos.php unrestricted uploadEPSS 3.6%CVE-2023-4121MEDIUMByzoro Smart S85F Management Platform unrestricted uploadEPSS 2.5%CVE-2023-4546LOWByzoro Smart S85F Management Platform licence.php access controlEPSS 1.3%