CVE-2023-31493
EUVD-2023-3579815.10.2024, 15:15
RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in language folder, while executing a crafted payload and escalate privileges allowing execution of any commands on the remote system.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| zoneminder | zoneminder | 𝑥 ≤ 1.36.33 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| zoneminder | zoneminder | 𝑥 ≤ 1.36.33 | ADP |
Debian Releases
Ubuntu Releases