Lucene search
IcscertCVELIST:CVE-2023-2505HistoryMay 22, 2023 - 9:01 p.m.
CVE-2023-2505
2023-05-2221:01:56
CWE-352
icscert
www.cve.org
2
csrf
vulnerability
code execution
file upload
7.7 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
9 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
51.8%
The affected products have a CSRF vulnerability that could allow an attacker to execute code and upload malicious files.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "STUDIO R3",
"vendor": "BirdDog",
"versions": [
{
"status": "affected",
"version": "3.6.4"
}
]
},
{
"defaultStatus": "unaffected",
"product": "4K QUAD",
"vendor": "BirdDog",
"versions": [
{
"status": "affected",
"version": "4.5.181"
},
{
"status": "affected",
"version": "4.5.196"
}
]
},
{
"defaultStatus": "unaffected",
"product": "MINI",
"vendor": "BirdDog",
"versions": [
{
"status": "affected",
"version": "2.6.2"
}
]
},
{
"defaultStatus": "unaffected",
"product": "A300 EYES",
"vendor": "BirdDog",
"versions": [
{
"status": "affected",
"version": "3.4"
}
]
}
]Related
cve
cve
CVE-2023-2505
2023-05-22 22:15:10
nvd
nvd
CVE-2023-2505
2023-05-22 22:15:10
prion
prion
Cross site request forgery (csrf)
2023-05-22 22:15:00
ics
ics
BirdDog Cameras and Encoders
2023-05-11 12:00:00
7.7 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
9 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
51.8%
Related for CVELIST:CVE-2023-2505