CVE-2023-5500
Frauscher: FDS102 for FAdC/FAdCi remote code execution vulnerability
Severity Score
8.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
This vulnerability allows an remote attacker with low privileges to misuse Improper Control of Generation of Code ('Code Injection') to gain full control of the affected device.
Esta vulnerabilidad permite a un atacante remoto con pocos privilegios hacer un uso indebido del control inadecuado de generación de código ("inyección de código") para obtener el control total del dispositivo afectado.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-10-10 CVE Reserved
- 2023-12-11 CVE Published
- 2024-08-02 CVE Updated
- 2024-10-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-94: Improper Control of Generation of Code ('Code Injection')
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://cert.vde.com/en/advisories/VDE-2023-049 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Frauscher Search vendor "Frauscher" | Frauscher Diagnostic System 102 Search vendor "Frauscher" for product "Frauscher Diagnostic System 102" | >= 2.10.0 < 2.10.2 Search vendor "Frauscher" for product "Frauscher Diagnostic System 102" and version " >= 2.10.0 < 2.10.2" | fadc |
Affected
| ||||||
| Frauscher Search vendor "Frauscher" | Frauscher Diagnostic System 102 Search vendor "Frauscher" for product "Frauscher Diagnostic System 102" | >= 2.10.0 < 2.10.2 Search vendor "Frauscher" for product "Frauscher Diagnostic System 102" and version " >= 2.10.0 < 2.10.2" | fadci |
Affected
| ||||||