CVEvulnerability

CVE-2023-6260

8.8 HIGH Published 2024-02-19 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-02-19
Last modified
2026-06-17
Assigner
57dba5dd-1a03-47f6-8b36-e84e47d335d8
CVSS 3.1 (57dba5dd-1a03-47f6-8b36-e84e47d335d8)
9.0 CRITICAL — CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Brivo ACS100, ACS300 allows OS Command Injection, Bypassing Physical Security.This issue affects ACS100 (Network Adjacent Access), ACS300 (Physical Access): from 5.2.4 before 6.2.4.3.

Affected configurations

• brivo acs100 firmware (>= 5.2.4 <= 6.2.4.3) • brivo acs300 firmware (>= 5.2.4 < 6.2.4.3)

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References