Lucene search
MitreCVE-2023-24282HistoryMar 08, 2023 - 9:15 p.m.
CVE-2023-24282
2023-03-0821:15:10
CWE-79
mitre
web.nvd.nist.gov
21
cve-2023-24282
poly trio 8800
file upload vulnerability
arbitrary code execution
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
AI Score
6
Confidence
High
EPSS
0.001
Percentile
24.7%
An arbitrary file upload vulnerability in Poly Trio 8800 7.2.2.1094 allows attackers to execute arbitrary code via a crafted ringtone file.
Affected configurations
Node
polytrio_8800Match-
polytrio_8800_firmwareMatch7.2.2.1094
| Vendor | Product | Version | CPE |
|---|---|---|---|
| poly | trio_8800 | - | cpe:2.3:h:poly:trio_8800:-:*:*:*:*:*:*:* |
| poly | trio_8800_firmware | 7.2.2.1094 | cpe:2.3:o:poly:trio_8800_firmware:7.2.2.1094:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-24282
2023-03-08 00:00:00
prion
prion
Design/Logic Flaw
2023-03-08 21:15:00
nvd
nvd
CVE-2023-24282
2023-03-08 21:15:10
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
AI Score
6
Confidence
High
EPSS
0.001
Percentile
24.7%
Related for CVE-2023-24282