PT-2023-31885 · Array · Motionpro

CVE-2023-51707

·

Publicado

2023-12-22

·

Atualizado

2024-01-09

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions MotionPro in Array ArrayOS AG versions prior to 9.4.0.505
Description The issue allows remote command execution via crafted packets. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.
Recommendations For versions prior to 9.4.0.505, update to version 9.4.0.505 or later to resolve the issue.

Correção

Command Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-51707

Produtos afetados

Motionpro