Lucene search

K
cveMitreCVE-2023-37249
HistoryAug 25, 2023 - 8:15 p.m.

CVE-2023-37249

2023-08-2520:15:08
mitre
web.nvd.nist.gov
27
infoblox
nios
cve-2023-37249
security vulnerability
shell access
nvd

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

38.7%

Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access.

Affected configurations

Nvd
Node
infobloxniosRange8.5.2
VendorProductVersionCPE
infobloxnios*cpe:2.3:o:infoblox:nios:*:*:*:*:*:*:*:*

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

38.7%

Related for CVE-2023-37249