VulnerabilityDeferred

CVE-2023-41918

A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs.

CRITICAL 10.0EPSS 0.57%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.57%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs. Attackers may exploit this to unauthenticated execute commands potentially leading to unauthorized data manipulation, access to privileged functions, or even the execution of arbitrary code.

CVSS 3.1: 10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS: 0.57% probability · 45th percentile
CISA KEV: Not listed
Weakness: CWE-306
Source: cert@ncsc.nl

References

https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273
https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.