Softnext Technologies Corp.’s SPAM SQR has a vulnerability of Code Injection within its specific function. An authenticated remote attacker with administrator privilege can exploit this vulnerability to execute arbitrary system command to perform arbitrary system operation or disrupt service.
References
| Link | Resource |
|---|---|
| https://www.twcert.org.tw/tw/cp-132-6955-c7612-1.html | Third Party Advisory |
| https://www.twcert.org.tw/tw/cp-132-6955-c7612-1.html | Third Party Advisory |
Configurations
History
21 Nov 2024, 07:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.twcert.org.tw/tw/cp-132-6955-c7612-1.html - Third Party Advisory |
03 Apr 2023, 14:05
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:softnext:spam_sqr:*:*:*:*:*:*:*:* | |
| References | (CONFIRM) https://www.twcert.org.tw/tw/cp-132-6955-c7612-1.html - Third Party Advisory | |
| First Time |
Softnext
Softnext spam Sqr |
27 Mar 2023, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Softnext Technologies Corp.’s SPAM SQR has a vulnerability of Code Injection within its specific function. An authenticated remote attacker with administrator privilege can exploit this vulnerability to execute arbitrary system command to perform arbitrary system operation or disrupt service. |
27 Mar 2023, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-03-27 04:15
Updated : 2024-11-21 07:48
NVD link : CVE-2023-24835
Mitre link : CVE-2023-24835
CVE.ORG link : CVE-2023-24835
JSON object : View
Products Affected
softnext
- spam_sqr
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')