CVE-2023-22581

White Rabbit Switch contains a vulnerability which makes it possible for an attacker to perform system commands under the context of the web application (the default installation makes the webserver run as the root user).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
home.cernwhite_rabbit_switch_firmware
𝑥
≤ 6.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://csirt.divd.nl/CVE-2023-22581/
https://csirt.divd.nl/DIVD-2022-00068/
https://vuldb.com/?id.227269
https://csirt.divd.nl/CVE-2023-22581/
https://csirt.divd.nl/DIVD-2022-00068/