CVE-2023-37249

CVE-2023-37249

EPSS 0.6%CWE-78

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

25 Aug 2023Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access.

Affected products

References

https://community.infoblox.com/t5/trending-kb-articles/nios-is-vulnerable-to-cve-2023-37249/ba-p/32190 https://infoblox.com