PT-2023-16425 · Dst-Admin · Dst-Admin

·

CVE-2023-0648

·

Published

2023-02-02

·

Updated

2024-05-17

CVSS v2.0

6.5

Medium

VectorAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions dst-admin version 1.5.0
Description A critical issue was found in dst-admin, affecting an unknown part of the file /home/masterConsole. The manipulation of the command argument leads to command injection. It is possible to initiate the attack remotely.
Recommendations For dst-admin version 1.5.0, as a temporary workaround, consider restricting access to the command argument to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2023-0648

Affected Products

Dst-Admin