CVE-2023-45312

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-45312
In the mtproto_proxy (aka MTProto proxy) component through 0.7.2 for Erlang, a low-privileged remote attacker can access an improperly secured default installation without authenticating and achieve remote command execution ability.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://medium.com/%40_sadshade/almost-2000-telegram-proxy-servers-are-potentially-vulnerable-to-rce-since-2018-742a455be16b
https://medium.com/%40_sadshade/almost-2000-telegram-proxy-servers-are-potentially-vulnerable-to-rce-since-2018-742a455be16b
Configurations

Configuration 1 (hide)

cpe:2.3:a:mtproto:mt_proto_proxy:*:*:*:*:*:erlang:*:*
History

21 Nov 2024, 08:26

Type Values Removed Values Added
References () https://medium.com/%40_sadshade/almost-2000-telegram-proxy-servers-are-potentially-vulnerable-to-rce-since-2018-742a455be16b - () https://medium.com/%40_sadshade/almost-2000-telegram-proxy-servers-are-potentially-vulnerable-to-rce-since-2018-742a455be16b -

07 Nov 2023, 04:21

Type Values Removed Values Added
References
  • {'url': 'https://medium.com/@_sadshade/almost-2000-telegram-proxy-servers-are-potentially-vulnerable-to-rce-since-2018-742a455be16b', 'name': 'https://medium.com/@_sadshade/almost-2000-telegram-proxy-servers-are-potentially-vulnerable-to-rce-since-2018-742a455be16b', 'tags': ['Exploit', 'Technical Description', 'Third Party Advisory'], 'refsource': 'MISC'}
  • () https://medium.com/%40_sadshade/almost-2000-telegram-proxy-servers-are-potentially-vulnerable-to-rce-since-2018-742a455be16b -

18 Oct 2023, 14:13

Type Values Removed Values Added
References (MISC) https://medium.com/@_sadshade/almost-2000-telegram-proxy-servers-are-potentially-vulnerable-to-rce-since-2018-742a455be16b - (MISC) https://medium.com/@_sadshade/almost-2000-telegram-proxy-servers-are-potentially-vulnerable-to-rce-since-2018-742a455be16b - Exploit, Technical Description, Third Party Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.8
CWE CWE-1188
CPE cpe:2.3:a:mtproto:mt_proto_proxy:*:*:*:*:*:erlang:*:*
First Time Mtproto mt Proto Proxy
Mtproto

10 Oct 2023, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-10-10 21:15

Updated : 2024-11-21 08:26

NVD link : CVE-2023-45312

Mitre link : CVE-2023-45312

CVE.ORG link : CVE-2023-45312

JSON object : View

Products Affected

mtproto

  • mt_proto_proxy
CWE
CWE-1188

Insecure Default Initialization of Resource