Disable BeanShell Interpreter Remote Server Mode

CVE-2023-40313

What is CVE-2023-40313?

A vulnerability has been identified in the BeanShell interpreter operating in remote server mode in OpenMNS Horizon and specific Meridian versions. This flaw can potentially enable an attacker to execute arbitrary Java code remotely. Users of Horizon versions prior to 32.0.2 and related Meridian applications are at risk. It is crucial to upgrade to Horizon version 32.0.2 or newer, or to one of the specified Meridian versions to mitigate this security threat. Additionally, it is important to follow secure installation practices by ensuring that these applications are not directly accessible from the Internet, as intended for private network use.

References