OS Command Injection Vulnerability in Suprema BioStar 2 Systems
CVE-2023-33364

8.8HIGH

Key Information:

Vendor

Supremainc

Status
Biostar 2
Vendor
CVE Published:
3 August 2023

What is CVE-2023-33364?

An OS Command injection vulnerability has been identified in Suprema BioStar 2 versions prior to V2.9.1. This vulnerability permits authenticated users to execute arbitrary operating system commands on the BioStar 2 server, potentially compromising the integrity and security of the system. Users are strongly advised to upgrade to the latest version to mitigate any associated risks.

References

https://kb.supremainc.com/knowledge/doku.php?id=en:releas...
https://claroty.com/team82/disclosure-dashboard/cve-2023-...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.