CVE-2023-30223 in SAS 4D Server

الملخص

بحسب MITRE • 16/06/2023

A broken authentication vulnerability in 4D SAS 4D Server software v17, v18, v19 R7, and earlier allows attackers to send crafted TCP packets containing requests to perform arbitrary actions.

Be aware that VulDB is the high quality source for vulnerability data.

• حجز: 07/04/2023
• إفشاء: 16/06/2023
• الاعتدال: تمت الموافقة
• إدخال: VDB-231769
• CPE: جاهز
• CWE: CWE-287 (مؤكد)
• CVSS: 7.5 (NVD)
• EPSS: 0.01123
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-30223
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-30223
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-30223/