VDB-238049 · CVE-2023-4544 · EUVD-2023-54399

Byzoro Smart S85F Management Platform har 20230809 /config/php.ini kura hakki ndiyam

Hakika vulnerability da aka rarraba a matsayin karshewa an gano a Byzoro Smart S85F Management Platform har 20230809. Tabbas, aikin $software_function ne ke da matsala; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburare $software_library, a cikin fayil /config/php.ini, a cikin sashi $software_component. Wuro manipulation ga kura hakki ndiyam. Amfani da CWE wajen bayyana matsala yana kaiwa CWE-425. Lalle, rauni an sanar da shi 08/25/2023. Ana samun bayanin tsaro don saukewa a github.com. Ana kiran wannan rauni da CVE-2023-4544. Ngam yiɗi ka a tuma ndiyam ka nder internet. Bayani na fasaha ga. Kuma, akwai exploit. Exploit ɗin an bayyana wa jama'a, za a iya amfani da shi. A sa'i, exploit might be approx. USD $0-$5k ndiyam. Á yí huɗɗi-na-gaskiya. Za a iya samun exploit a github.com. 0-day ga, an ndiyam a wuro be $0-$5k. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

5 Goyarwa · 87 Datenpunkte

Furɗe	Súgá 08/25/2023 17:28	Gargadi 1/4 09/20/2023 13:09	Gargadi 2/4 09/20/2023 13:15	Gargadi 3/4 04/09/2024 09:06	Gargadi 4/4 07/02/2025 03:58
software_vendor	Beijing Baichuo	Beijing Baichuo	Beijing Baichuo	Byzoro	Byzoro
software_name	Smart S85F Management Platform	Smart S85F Management Platform	Smart S85F Management Platform	Smart S85F Management Platform	Smart S85F Management Platform
software_version	<=20230809	<=20230809	<=20230809	<=20230809	<=20230809
software_file	/config/php.ini	/config/php.ini	/config/php.ini	/config/php.ini	/config/php.ini
vulnerability_cwe	CWE-425 (kura hakki ndiyam)	CWE-425 (kura hakki ndiyam)	CWE-425 (kura hakki ndiyam)	CWE-425 (kura hakki ndiyam)	CWE-425 (kura hakki ndiyam)
vulnerability_risk	1	1	1	1	1
cvss3_vuldb_av	N	N	N	N	N
cvss3_vuldb_ac	L	L	L	L	L
cvss3_vuldb_ui	N	N	N	N	N
cvss3_vuldb_s	U	U	U	U	U
cvss3_vuldb_c	L	L	L	L	L
cvss3_vuldb_i	N	N	N	N	N
cvss3_vuldb_a	N	N	N	N	N
cvss3_vuldb_e	P	P	P	P	P
cvss3_vuldb_rc	R	R	R	R	R
advisory_url	https://github.com/jo1995hn/cve/blob/main/s856.md	https://github.com/jo1995hn/cve/blob/main/s856.md	https://github.com/jo1995hn/cve/blob/main/s856.md	https://github.com/jo1995hn/cve/blob/main/s856.md	https://github.com/jo1995hn/cve/blob/main/s856.md
exploit_availability	1	1	1	1	1
exploit_publicity	1	1	1	1	1
exploit_url	https://github.com/jo1995hn/cve/blob/main/s856.md	https://github.com/jo1995hn/cve/blob/main/s856.md	https://github.com/jo1995hn/cve/blob/main/s856.md	https://github.com/jo1995hn/cve/blob/main/s856.md	https://github.com/jo1995hn/cve/blob/main/s856.md
source_cve	CVE-2023-4544	CVE-2023-4544	CVE-2023-4544	CVE-2023-4544	CVE-2023-4544
cna_responsible	VulDB	VulDB	VulDB	VulDB	VulDB
response_summary	The vendor was contacted early about this disclosure but did not respond in any way.	The vendor was contacted early about this disclosure but did not respond in any way.	The vendor was contacted early about this disclosure but did not respond in any way.	The vendor was contacted early about this disclosure but did not respond in any way.	The vendor was contacted early about this disclosure but did not respond in any way.
advisory_date	1692914400 (08/25/2023)	1692914400 (08/25/2023)	1692914400 (08/25/2023)	1692914400 (08/25/2023)	1692914400 (08/25/2023)
cvss2_vuldb_av	N	N	N	N	N
cvss2_vuldb_ac	L	L	L	L	L
cvss2_vuldb_ci	P	P	P	P	P
cvss2_vuldb_ii	N	N	N	N	N
cvss2_vuldb_ai	N	N	N	N	N
cvss2_vuldb_e	POC	POC	POC	POC	POC
cvss2_vuldb_rc	UR	UR	UR	UR	UR
cvss2_vuldb_au	S	S	S	S	S
cvss2_vuldb_rl	ND	ND	ND	ND	ND
cvss3_vuldb_pr	L	L	L	L	L
cvss3_vuldb_rl	X	X	X	X	X
cvss2_vuldb_basescore	4.0	4.0	4.0	4.0	4.0
cvss2_vuldb_tempscore	3.4	3.4	3.4	3.4	3.4
cvss3_vuldb_basescore	4.3	4.3	4.3	4.3	4.3
cvss3_vuldb_tempscore	3.9	3.9	3.9	3.9	3.9
cvss3_meta_basescore	4.3	4.3	4.3	4.3	4.3
cvss3_meta_tempscore	3.9	3.9	4.2	4.2	4.2
price_0day	$0-$5k	$0-$5k	$0-$5k	$0-$5k	$0-$5k
cve_assigned		1692914400 (08/25/2023)	1692914400 (08/25/2023)	1692914400 (08/25/2023)	1692914400 (08/25/2023)
cve_nvd_summary		A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230809. It has been rated as problematic. This issue affects some unknown processing of the file /config/php.ini. The manipulation leads to direct request. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238049 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.	A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230809. It has been rated as problematic. This issue affects some unknown processing of the file /config/php.ini. The manipulation leads to direct request. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238049 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.	A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230809. It has been rated as problematic. This issue affects some unknown processing of the file /config/php.ini. The manipulation leads to direct request. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238049 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.	A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230809. It has been rated as problematic. This issue affects some unknown processing of the file /config/php.ini. The manipulation leads to direct request. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-238049 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
cvss3_nvd_av			N	N	N
cvss3_nvd_ac			L	L	L
cvss3_nvd_pr			L	L	L
cvss3_nvd_ui			N	N	N
cvss3_nvd_s			U	U	U
cvss3_nvd_c			L	L	L
cvss3_nvd_i			N	N	N
cvss3_nvd_a			N	N	N
cvss2_nvd_av			N	N	N
cvss2_nvd_ac			L	L	L
cvss2_nvd_au			S	S	S
cvss2_nvd_ci			P	P	P
cvss2_nvd_ii			N	N	N
cvss2_nvd_ai			N	N	N
cvss3_cna_av			N	N	N
cvss3_cna_ac			L	L	L
cvss3_cna_pr			L	L	L
cvss3_cna_ui			N	N	N
cvss3_cna_s			U	U	U
cvss3_cna_c			L	L	L
cvss3_cna_i			N	N	N
cvss3_cna_a			N	N	N
cve_cna			VulDB	VulDB	VulDB
cvss2_nvd_basescore			4.0	4.0	4.0
cvss3_nvd_basescore			4.3	4.3	4.3
cvss3_cna_basescore			4.3	4.3	4.3
cvss4_vuldb_av				N	N
cvss4_vuldb_ac				L	L
cvss4_vuldb_pr				L	L
cvss4_vuldb_ui				N	N
cvss4_vuldb_vc				L	L
cvss4_vuldb_vi				N	N
cvss4_vuldb_va				N	N
cvss4_vuldb_e				P	P
cvss4_vuldb_at				N	N
cvss4_vuldb_sc				N	N
cvss4_vuldb_si				N	N
cvss4_vuldb_sa				N	N
cvss4_vuldb_bscore				5.3	5.3
cvss4_vuldb_btscore				2.1	2.1
euvd_id					EUVD-2023-54399

◂ Gurɗo Gumti Gada ▸