CVEvulnerability
CVE-2023-41918
10.0 CRITICAL
Official page ↗
- Status
- Deferred
- Published
- 2024-07-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- Weaknesses
- CWE-306
Description
A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs. Attackers may exploit this to unauthenticated execute commands potentially leading to unauthorized data manipulation, access to privileged functions, or even the execution of arbitrary code.
Related
Weakness · CWE (1)
- CWE-306 Missing Authentication for Critical Functionality weakness
References
- https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273 advisories.ncsc.nl
- https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273 advisories.ncsc.nl