CVE-2023-30131

EUVD-2023-34560
An issue discovered in IXP EasyInstall 6.6.14884.0 allows attackers to run arbitrary commands, gain escalated privilege, and cause other unspecified impacts via unauthenticated API calls.
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 46%
Affected Products (NVD)
VendorProductVersion
ixpdataeasyinstall
6.6.148840
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.bramfitt-tech-labs.com/article/easy-install-cve-issue
https://www.bramfitt-tech-labs.com/article/easy-install-cve-issue