CVE-2023-1731
Improper Input Validation in Meinberg LTOS
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.2EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
24 Apr 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary commands.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
Meinberg · LTOSWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →