Remote Code Execution Vulnerability in Weaver E-Cology
CVE-2023-51892

9.8CRITICAL

Key Information:

Vendor

Weaver

Status
E-cology
Vendor
CVE Published:
20 January 2024

What is CVE-2023-51892?

Weaver E-Cology version 10.0.2310.01 contains a vulnerability that enables remote attackers to execute arbitrary code. This occurs via a specially crafted script directed at the FrameworkShellController component. Successful exploitation may allow an attacker to gain control over the affected system, leading to potentially severe consequences. Organizations using this product should review their security posture and apply necessary protective measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://e-cology.com
https://www.weaver.com.cn/
https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/m...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.