Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubexploit9923F57F-B5EC-5993-8913-975CAF1808B1
HistoryAug 07, 2023 - 8:55 p.m.

Exploit for Improper Input Validation in Lexmark Cxtpc Firmware

2023-08-0720:55:15
44
lexmark cxtpc firmware
improper input validation
cve-2023-34362
command injection
credential dumping
reverse shell
music exploit
technical analysis
mitigations
latest firmware version

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.1

Confidence

Low

EPSS

0.97

Percentile

99.8%

JSON

CVE-2023-34362

POCs for credential dumping, reverse shells, an…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

Related

cvelist 2
cve 2
prion 2
zdi 3
nvd 2
nuclei 2
thn 8
malwarebytes 4
githubexploit 9
wizblog 1
broadcom 1
qualysblog 3
metasploit 2
talosblog 5
cisa_kev 1
packetstorm 2
nessus 1
impervablog 2
rapid7blog 6
vulnrichment 1
akamaiblog 1
zdt 2
openvas 1
hivepro 1
attackerkb 1
ics 3
wallarmlab 1
trellix 2
securelist 1
cvelist
cvelist
CVE-2023-26067
2023-04-10 00:00:00
CVE-2023-34362
2023-06-02 00:00:00
cve
cve
CVE-2023-26067
2023-04-10 20:15:10
CVE-2023-34362
2023-06-02 14:15:09
prion
prion
Input validation
2023-04-10 20:15:00
Sql injection
2023-06-02 14:15:00
zdi
zdi
(Pwn2Own) Lexmark MC3224i lbtraceapp _WriteTarFile Command Injection Privilege Escalation Vulnerability
2023-05-17 00:00:00
(Pwn2Own) Lexmark MC3224i fax_change_faxtrace_setting Command Injection Remote Code Execution Vulnerability
2023-05-17 00:00:00
(Pwn2Own) Lexmark MC3224i lbtraceapp Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
2023-05-17 00:00:00
nvd
nvd
CVE-2023-26067
2023-04-10 20:15:10
CVE-2023-34362
2023-06-02 14:15:09
nuclei
nuclei
Lexmark Printers - Command Injection
2023-08-12 17:45:00
MOVEit Transfer - Remote Code Execution
2023-06-20 12:42:23
thn
thn
MOVEit Transfer Under Attack: Zero-Day Vulnerability Actively Being Exploited
2023-06-02 03:25:00
New Critical MOVEit Transfer SQL Injection Vulnerabilities Discovered - Patch Now!
2023-06-10 08:50:00
Microsoft: Lace Tempest Hackers Behind Active Exploitation of MOVEit Transfer App
2023-06-05 12:03:00
malwarebytes
malwarebytes
More MOVEit vulnerabilities found while the first one still resonates
2023-06-12 02:00:00
Ransomware review: July 2023
2023-07-13 08:15:00
Cl0p ransomware gang claims first victims of the MOVEit vulnerability
2023-06-06 01:00:00
githubexploit
githubexploit
Exploit for SQL Injection in Progress Moveit Cloud
2024-06-28 17:13:15
Exploit for SQL Injection in Progress Moveit Cloud
2023-06-09 19:07:32
Exploit for SQL Injection in Progress Moveit Cloud
2023-06-06 15:33:49
wizblog
wizblog
CVE-2023-34362 RCE vulnerability in MOVEit Transfer exploited in the wild: everything you need to know
2023-06-04 18:20:05
broadcom
broadcom
CVE-2023-34362 - a SQL injection vulnerability has been found in the MOVEit Transfer web application.
2023-07-27 00:00:00
qualysblog
qualysblog
Progress MOVEit Transfer Vulnerability Being Actively Exploited
2023-06-07 17:28:24
Qualys Survey of Top 10 Exploited Vulnerabilities in 2023
2023-09-26 13:04:00
2023 Threat Landscape Year in Review: If Everything Is Critical, Nothing Is
2023-12-19 15:00:00
metasploit
metasploit
MOVEit SQL Injection vulnerability
2023-06-14 15:04:07
Lexmark Device Embedded Web Server RCE
2023-08-31 00:30:14
talosblog
talosblog
URLs have always been a great hiding place for threat actors
2023-06-15 18:00:39
Cybersecurity hotlines at colleges could go a long way toward filling the skills gap
2023-06-22 18:00:44
Now’s not the time to take our foot off the gas when it comes to fighting disinformation online
2023-06-08 18:00:35
cisa_kev
cisa_kev
Progress MOVEit Transfer SQL Injection Vulnerability
2023-06-02 00:00:00
packetstorm
packetstorm
MOVEit SQL Injection
2023-06-23 00:00:00
Lexmark Device Embedded Web Server Remote Code Execution
2023-09-19 00:00:00
nessus
nessus
Progress MOVEit Transfer < 2020.0 / 2020.1 / 2021.0 < 2021.0.6 / 2021.1.0 < 2021.1.4 / 2022.0.0 < 2022.0.4 / 2022.1.0 < 2022.1.5 / 2023.0.0 < 2023.0.1 Critical Vulnerability (May 2023)
2023-06-01 00:00:00
impervablog
impervablog
CVE-2023-34362 – MOVEit Transfer – An attack chain that retrieves sensitive information
2023-06-06 15:55:03
New MOVEit vulnerability CVE-2023-36934 blocked by Imperva
2023-07-10 15:50:43
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-06-23 19:01:39
Rapid7 Observed Exploitation of Critical MOVEit Transfer Vulnerability
2023-06-01 15:23:53
CVE-2023-34362: MOVEit Vulnerability Timeline of Events
2023-06-14 19:10:05
vulnrichment
vulnrichment
CVE-2023-34362
2023-06-02 00:00:00
akamaiblog
akamaiblog
MOVEit SQLi Zero-Day (CVE-2023-34362) Exploited by CL0P Ransomware Group
2023-06-08 09:00:00
zdt
zdt
MOVEit SQL Injection Exploit
2023-06-26 00:00:00
Lexmark Device Embedded Web Server Remote Code Execution Exploit
2023-09-19 00:00:00
openvas
openvas
Lexmark Printer Multiple Input Validation Vulnerabilities (Mar 2023)
2023-03-16 00:00:00
hivepro
hivepro
Actors, Threats and Vulnerabilities 5 June to 11 June 2023
2023-06-13 06:58:42
attackerkb
attackerkb
CVE-2023-34362
2023-06-02 00:00:00
ics
ics
#StopRansomware: CL0P Ransomware Gang Exploits CVE-2023-34362 MOVEit Vulnerability
2023-06-07 12:00:00
Increased Truebot Activity Infects U.S. and Canada Based Networks
2023-07-06 12:00:00
North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs
2024-07-25 12:00:00
wallarmlab
wallarmlab
What You Need To Know About MOVEit
2023-06-16 06:05:40
trellix
trellix
The Bug Report - June 2023 Edition
2023-07-05 00:00:00
The Bug Report - June 2023 Edition
2023-07-05 00:00:00
securelist
securelist
IT threat evolution in Q2 2023. Non-mobile statistics
2023-08-30 10:00:41

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.1

Confidence

Low

EPSS

0.97

Percentile

99.8%

JSON
Related for 9923F57F-B5EC-5993-8913-975CAF1808B1
cvelist2cve2prion2zdi3nvd2nuclei2thn8malwarebytes4githubexploit9wizblog1broadcom1qualysblog3metasploit2talosblog5cisa_kev1packetstorm2nessus1impervablog2rapid7blog6vulnrichment1akamaiblog1zdt2openvas1hivepro1attackerkb1ics3wallarmlab1trellix2securelist1