PT-2023-8149 · Voltronic Power · Voltronic Power Viewpower

CVE-2023-51582

·

Publicado

2023-12-20

·

Atualizado

2024-05-03

CVSS v2.0

10

Crítica

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Voltronic Power ViewPower (affected versions not specified)
Description The issue is related to the use of dangerous methods or functions in the LinuxMonitorConsole class of the Voltronic Power ViewPower software. This allows remote attackers to execute arbitrary code on affected installations without requiring authentication. The specific flaw exists within the LinuxMonitorConsole class due to an exposed dangerous method, which can be leveraged by an attacker to execute code in the context of the current user.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2024-00133
CVE-2023-51582
ZDI-23-1887

Produtos afetados

Voltronic Power Viewpower