CVE-2023-34999

Summary

A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 (< 5.7.6) and v6 (< 6.5.0) that allows an attacker to perform arbitrary code execution via the admin web interface.

Affected Software

VendorProductVersion RangeStatus
RTSVLink Virtual Matrix Software5.0.0 < 5.7.6affected
RTSVLink Virtual Matrix Software6.0.0 < 6.5.0affected

Weaknesses

  • CWE-94: CWE-94 Improper Control of Generation of Code ('Code Injection')

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References