CVE-2023-37292

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-37292
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in HGiga iSherlock 4.5 (iSherlock-user modules), HGiga iSherlock 5.5 (iSherlock-user modules) allows OS Command Injection.This issue affects iSherlock 4.5: before iSherlock-user-4.5-174; iSherlock 5.5: before iSherlock-user-5.5-174.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.twcert.org.tw/tw/cp-132-7239-8fc29-1.html Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:hgiga:isherlock:*:*:*:*:*:*:*:*
cpe:2.3:a:hgiga:isherlock:*:*:*:*:*:*:*:*
History

No history.

Information

Published : 2023-07-21 05:15

Updated : 2023-08-04 19:28

NVD link : CVE-2023-37292

Mitre link : CVE-2023-37292

CVE.ORG link : CVE-2023-37292

JSON object : View

Products Affected

hgiga

  • isherlock
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')