CVE-2023-22581

Published: Apr 24, 2023Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

White Rabbit Switch contains a vulnerability which makes it possible for an attacker to perform system commands under the context of the web application (the default installation makes the webserver run as the root user).

Affected (1)

Products: Home.cern: White Rabbit Switch Firmware

Home.cern

1 product

White Rabbit Switch Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Home.cern White Rabbit Switch Firmware	Up to 6.0.1

Running on/with	Platform Versions
Home.cern White Rabbit Switch	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (5)

https://csirt.divd.nl/CVE-2023-22581/

Source: csirt@divd.nl

Broken Link

https://csirt.divd.nl/DIVD-2022-00068/

Source: csirt@divd.nl

Broken Link

https://vuldb.com/?id.227269

Source: nvd@nist.gov

Third Party Advisory

https://csirt.divd.nl/CVE-2023-22581/

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://csirt.divd.nl/DIVD-2022-00068/

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

Timeline

No history available yet.