CVE-2023-25069

8.8HIGH

Key Information

Vendor
Trend Micro
Status
TXOne Networks StellarOne
Vendor
CVE Published:
22 March 2023

Summary

TXOne StellarOne has an improper access control privilege escalation vulnerability in every version before V2.0.1160 that could allow a malicious, falsely authenticated user to escalate his privileges to administrator level. With these privileges, an attacker could perform actions they are not authorized to.

Please note: an attacker must first obtain a low-privileged authenticated user's profile on the target system in order to exploit this vulnerability.

Affected Version(s)

TXOne Networks StellarOne < 2.0.1160

Refferences

https://success.trendmicro.com/solution/000292486
https://www.zerodayinitiative.com/advisories/ZDI-23-231/

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.