Lucene search

MitreCVE-2023-45467

HistoryOct 13, 2023 - 1:15 p.m.

CVE-2023-45467

2023-10-1313:15:12

CWE-78

mitre

web.nvd.nist.gov

cve-2023-45467

netis n3mv2

command injection

vulnerability

ntp

time settings

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

46.9%

JSON

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings.

Affected configurations

Nvd

Node

netis-systemsn3m_firmwareMatch1.0.1.865

AND

netis-systemsn3mMatchv2

VendorProductVersionCPE
netis-systemsn3m_firmware1.0.1.865cpe:2.3:o:netis-systems:n3m_firmware:1.0.1.865:*:*:*:*:*:*:*
netis-systemsn3mv2cpe:2.3:h:netis-systems:n3m:v2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netis-systems	n3m_firmware	1.0.1.865	cpe:2.3:o:netis-systems:n3m_firmware:1.0.1.865:::::::*
netis-systems	n3m	v2	cpe:2.3:h:netis-systems:n3m:v2:::::::*

References

github.com/adhikara13/CVE/blob/main/netis_N3/blind%20command%20injection%20in%20ntpServIP%20parameter%20in%20Time%20Settings%20.md

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

46.9%

JSON

Related for CVE-2023-45467