Back to overview

CVE-2023-41917

CRITICAL
10.0
CVSS 3.1
Description
Inadequate input validation exposes the system to potential remote code execution (RCE) risks. Attackers can exploit this vulnerability by appending shell commands to the Speed-Measurement feature, enabling unauthorized code execution.

Metadata

CVE ID
CVE-2023-41917
State
PUBLISHED
Assigner
NCSC-NL
Reserved
2023-09-05 10:14 UTC
Published
2024-07-02 07:41 UTC
Last updated
2024-08-02 19:09 UTC
Primary CWE
CWE-20
CWE-20 Improper Input Validation
Vendor / Product
Kiloview / P1/P2
Sources
cve.org  ·  NVD

Severity & Metrics

10.0 CRITICAL CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
SSVC — CISA Coordinator
Exploitation
none
Automatable
yes
Tech. Impact
total
Affected products (1)
VendorProductPlatformVersions
Kiloview P1/P2 — All ≤ 4.8.2605
Weakness (CWE)
CWESourceDescription
CWE-20 cna CWE-20 Improper Input Validation
CVSS scores (1)
ScoreSeverityVersionSourceVector
10.0 CRITICAL 3.1 cna CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References (1)
Back to overview