CVE-2023-41918

Published: Jul 2, 2024Modified: Jun 17, 2026Deferred

10.0

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 6.0

Source: cert@ncsc.nl (Secondary)

Description

A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs. Attackers may exploit this to unauthenticated execute commands potentially leading to unauthorized data manipulation, access to privileged functions, or even the execution of arbitrary code.

Related CWEs

CWE-306

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (2)

https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273

Source: cert@ncsc.nl

https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.