dst-admin masterConsole command injection
CVE-2023-0648

7.5HIGH

Key Information:

Vendor

Dst-admin Project

Status
dst-admin
Vendor
CVE Published:
2 February 2023

What is CVE-2023-0648?

A command injection vulnerability exists in dst-admin version 1.5.0, where an attacker can exploit an unknown part of the system through manipulated command arguments. This allows unauthorized remote access and the execution of arbitrary commands. Public disclosure has occurred, increasing the urgency for users to secure their systems. It is crucial for organizations using this software to apply necessary patches or mitigations to prevent potential exploits.

Affected Version(s)

dst-admin 1.5.0

References

https://vuldb.com/?id.220035
vdb-entrytechnical-description
https://vuldb.com/?ctiid.220035
signaturepermissions-required
https://github.com/Ha0Liu/cveAdd/tree/developer/dst-admin...
exploit

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

yanfei.chen (VulDB User)
.