CVE-2023-6201

Command Injection in Univera Panorama Framework

CVSS 8.8 HIGHEPSS 1.6%CWE-78

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 8.8EPSS 1.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

28 nov 2023Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Univera Computer System Panorama allows Command Injection. This issue affects Panorama: before 8.0.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Univera Computer System · Panorama

Referencias

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0665 https://www.usom.gov.tr/bildirim/tr-23-0665