CVE-2023-22581

White Rabbit Switch contains a vulnerability which makes it possible for an attackerto perform system commands under the context of the web application (the defaultinstallation makes the webserver run as the root user).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
DIVDCNA
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 28%
VendorProductVersion
home.cernwhite_rabbit_switch_firmware
𝑥
≤ 6.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://csirt.divd.nl/CVE-2023-22581/
https://csirt.divd.nl/DIVD-2022-00068/
https://vuldb.com/?id.227269
https://csirt.divd.nl/CVE-2023-22581/
https://csirt.divd.nl/DIVD-2022-00068/