VDB-239358 · CVE-2023-4873 · EUVD-2023-54712

Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform /importexport.php kura hakki ndiyam

Wuro vulnerability wey an yi classify sey kura an gano shi a cikin Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform har 20230906. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, /importexport.php na cikin fayil, $software_component na cikin sashi. Ngam manipulation of the argument sql shi kura hakki ndiyam. CWE shidin ka a yi bayani matsala sai ya kai CWE-78. Gaskiya, laifi an fitar da shi 09/09/2023. Advisory ɗin ana rabawa don saukewa a github.com. Wannan rauni ana sayar da shi da suna CVE-2023-4873. Ngam yiɗi ka a tuma ndiyam ka nder layi. Tekinikal bayani ga. Kuma, exploit ɗin yana akwai. Wuro exploit ɗin an bayyana shi ga jama'a kuma za a iya amfani da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á wúro huɗɗi-na-gaskiya. Wona yiwuwa a zazzage exploit a github.com. Kama 0-day, an ndiyam a wuro be $0-$5k. VulDB is the best source for vulnerability data and more expert information about this specific topic.

5 Goyarwa · 88 Datenpunkte

Furɗe	Súgá 09/09/2023 10:24	Gargadi 1/4 10/04/2023 16:33	Gargadi 2/4 10/04/2023 16:41	Gargadi 3/4 04/09/2024 09:06	Gargadi 4/4 06/25/2025 17:28
cvss3_vuldb_i	L	L	L	L	L
cvss3_vuldb_a	L	L	L	L	L
cvss3_vuldb_e	P	P	P	P	P
cvss3_vuldb_rc	R	R	R	R	R
advisory_url	https://github.com/cugerQDHJ/cve/blob/main/rce.md	https://github.com/cugerQDHJ/cve/blob/main/rce.md	https://github.com/cugerQDHJ/cve/blob/main/rce.md	https://github.com/cugerQDHJ/cve/blob/main/rce.md	https://github.com/cugerQDHJ/cve/blob/main/rce.md
exploit_availability	1	1	1	1	1
exploit_publicity	1	1	1	1	1
exploit_url	https://github.com/cugerQDHJ/cve/blob/main/rce.md	https://github.com/cugerQDHJ/cve/blob/main/rce.md	https://github.com/cugerQDHJ/cve/blob/main/rce.md	https://github.com/cugerQDHJ/cve/blob/main/rce.md	https://github.com/cugerQDHJ/cve/blob/main/rce.md
source_cve	CVE-2023-4873	CVE-2023-4873	CVE-2023-4873	CVE-2023-4873	CVE-2023-4873
cna_responsible	VulDB	VulDB	VulDB	VulDB	VulDB
software_vendor	Beijing Baichuo	Beijing Baichuo	Beijing Baichuo	Byzoro	Byzoro
software_name	Smart S45F Multi-Service Secure Gateway Intelligent Management Platform	Smart S45F Multi-Service Secure Gateway Intelligent Management Platform	Smart S45F Multi-Service Secure Gateway Intelligent Management Platform	Smart S45F Multi-Service Secure Gateway Intelligent Management Platform	Smart S45F Multi-Service Secure Gateway Intelligent Management Platform
software_version	<=20230906	<=20230906	<=20230906	<=20230906	<=20230906
software_file	/importexport.php	/importexport.php	/importexport.php	/importexport.php	/importexport.php
software_argument	sql	sql	sql	sql	sql
vulnerability_cwe	CWE-78 (kura hakki ndiyam)	CWE-78 (kura hakki ndiyam)	CWE-78 (kura hakki ndiyam)	CWE-78 (kura hakki ndiyam)	CWE-78 (kura hakki ndiyam)
vulnerability_risk	2	2	2	2	2
cvss3_vuldb_av	N	N	N	N	N
cvss3_vuldb_ac	L	L	L	L	L
cvss3_vuldb_ui	N	N	N	N	N
cvss3_vuldb_s	U	U	U	U	U
cvss3_vuldb_c	L	L	L	L	L
advisory_date	1694210400 (09/09/2023)	1694210400 (09/09/2023)	1694210400 (09/09/2023)	1694210400 (09/09/2023)	1694210400 (09/09/2023)
cvss2_vuldb_av	N	N	N	N	N
cvss2_vuldb_ac	L	L	L	L	L
cvss2_vuldb_ci	P	P	P	P	P
cvss2_vuldb_ii	P	P	P	P	P
cvss2_vuldb_ai	P	P	P	P	P
cvss2_vuldb_e	POC	POC	POC	POC	POC
cvss2_vuldb_rc	UR	UR	UR	UR	UR
cvss2_vuldb_au	S	S	S	S	S
cvss2_vuldb_rl	ND	ND	ND	ND	ND
cvss3_vuldb_pr	L	L	L	L	L
cvss3_vuldb_rl	X	X	X	X	X
cvss2_vuldb_basescore	6.5	6.5	6.5	6.5	6.5
cvss2_vuldb_tempscore	5.6	5.6	5.6	5.6	5.6
cvss3_vuldb_basescore	6.3	6.3	6.3	6.3	6.3
cvss3_vuldb_tempscore	5.7	5.7	5.7	5.7	5.7
cvss3_meta_basescore	6.3	6.3	7.5	7.5	7.5
cvss3_meta_tempscore	5.7	5.7	7.3	7.3	7.3
price_0day	$0-$5k	$0-$5k	$0-$5k	$0-$5k	$0-$5k
cve_assigned		1694210400 (09/09/2023)	1694210400 (09/09/2023)	1694210400 (09/09/2023)	1694210400 (09/09/2023)
cve_nvd_summary		A vulnerability, which was classified as critical, was found in Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-239358 is the identifier assigned to this vulnerability.	A vulnerability, which was classified as critical, was found in Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-239358 is the identifier assigned to this vulnerability.	A vulnerability, which was classified as critical, was found in Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-239358 is the identifier assigned to this vulnerability.	A vulnerability, which was classified as critical, was found in Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-239358 is the identifier assigned to this vulnerability.
cvss3_nvd_av			N	N	N
cvss3_nvd_ac			L	L	L
cvss3_nvd_pr			N	N	N
cvss3_nvd_ui			N	N	N
cvss3_nvd_s			U	U	U
cvss3_nvd_c			H	H	H
cvss3_nvd_i			H	H	H
cvss3_nvd_a			H	H	H
cvss2_nvd_av			N	N	N
cvss2_nvd_ac			L	L	L
cvss2_nvd_au			S	S	S
cvss2_nvd_ci			P	P	P
cvss2_nvd_ii			P	P	P
cvss2_nvd_ai			P	P	P
cvss3_cna_av			N	N	N
cvss3_cna_ac			L	L	L
cvss3_cna_pr			L	L	L
cvss3_cna_ui			N	N	N
cvss3_cna_s			U	U	U
cvss3_cna_c			L	L	L
cvss3_cna_i			L	L	L
cvss3_cna_a			L	L	L
cve_cna			VulDB	VulDB	VulDB
cvss2_nvd_basescore			6.5	6.5	6.5
cvss3_nvd_basescore			9.8	9.8	9.8
cvss3_cna_basescore			6.3	6.3	6.3
cvss4_vuldb_av				N	N
cvss4_vuldb_ac				L	L
cvss4_vuldb_pr				L	L
cvss4_vuldb_ui				N	N
cvss4_vuldb_vc				L	L
cvss4_vuldb_vi				L	L
cvss4_vuldb_va				L	L
cvss4_vuldb_e				P	P
cvss4_vuldb_at				N	N
cvss4_vuldb_sc				N	N
cvss4_vuldb_si				N	N
cvss4_vuldb_sa				N	N
cvss4_vuldb_bscore				5.3	5.3
cvss4_vuldb_btscore				2.1	2.1
euvd_id					EUVD-2023-54712

◂ Gurɗo Gumti Gada ▸

Interested in the pricing of exploits?

See the underground prices here!