Lucene search

K
cvelistMitreCVELIST:CVE-2023-38336
HistoryJul 14, 2023 - 12:00 a.m.

CVE-2023-38336

2023-07-1400:00:00
mitre
www.cve.org
6
cve-2023-38336
netkit-rcp
command injection
filenames
vulnerability
cve-2006-0225
cve-2019-7283
cve-2020-15778

7.2 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.3%

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778.