CVE-2023-22581
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
White Rabbit Switch contains a vulnerability which makes it possible for an attacker to perform system commands under the context of the web application (the default installation makes the webserver run as the root user).
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| CERN | White Rabbit Switch | < v6.0.1 <= v6.0.1 | affected |
Weaknesses
- CWE-20: CWE-20 Improper Input Validation
Workarounds
Upgrade to version 6.0.2
ADP Enrichment
CVE Program Container
Additional References
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.