ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2023-7227
9.8критическая

CVE-2023-7227

Описание

SystemK NVR 504/508/516 versions 2.3.5SK.30084998 and prior are vulnerable to a command injection vulnerability in the dynamic domain name system (DDNS) settings that could allow an attacker to execute arbitrary commands with root privileges.

Затрагиваемое ПО
Systemk-corp Nvr 504 firmwareSystemk-corp Nvr 504Systemk-corp Nvr 508 firmwareSystemk-corp Nvr 508Systemk-corp Nvr 516 firmwareSystemk-corp Nvr 516
CVSS
Балл9.8 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Источники
https://www.cisa.gov/news-events/ics-advisories/icsa-24-025-02https://www.cisa.gov/news-events/ics-advisories/icsa-24-025-02