CVE-2023-24135

EUVD-2023-28198
Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a command injection vulnerability in the function formWriteFacMac. This vulnerability allows attackers to execute arbitrary commands via manipulation of the mac parameter.
Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA-ADPADP
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 40%
Affected Products (NVD)
VendorProductVersion
jensenofscandinaviaeagle_1200ac_firmware
15.03.06.33_en:_en
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://eagle.com
http://jensen.com
https://oxnan.com/img/Pasted%20image%2020230112110814.png
https://oxnan.com/posts/WriteFacMac-Command-Injection
http://eagle.com
http://jensen.com
https://oxnan.com/img/Pasted%20image%2020230112110814.png
https://oxnan.com/posts/WriteFacMac-Command-Injection