PT-2023-18835
CVE-2023-23076
·
Published
2023-02-01
·
Updated
2023-02-23
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Support Center Plus version 11
Description
The issue is an OS Command injection vulnerability in Support Center Plus via Executor in Action when creating new schedules.
Recommendations
For Support Center Plus version 11, consider disabling the Executor in Action feature when creating new schedules until a patch is available. Restrict access to the schedule creation functionality to minimize the risk of exploitation. Avoid using the vulnerable Executor in Action feature in Support Center Plus version 11 until the issue is resolved.
Found an issue in the description? Have something to add? Feel free to write us 👾