PT-2023-18835
CVE-2023-23076
·
تاريخ النشر
2023-02-01
·
تاريخ التحديث
2023-02-23
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Support Center Plus version 11
Description
The issue is an OS Command injection vulnerability in Support Center Plus via Executor in Action when creating new schedules.
Recommendations
For Support Center Plus version 11, consider disabling the Executor in Action feature when creating new schedules until a patch is available. Restrict access to the schedule creation functionality to minimize the risk of exploitation. Avoid using the vulnerable Executor in Action feature in Support Center Plus version 11 until the issue is resolved.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾