CVE-2023-1731CWE-434

Improper Input Validation in Meinberg LTOS

High · published April 24, 2023

CVSS v3.1
7.2
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary commands.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00970 · 61.5th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2023-04-24T13:36Z
EPSS history
Timeline
  • 24 APR 13:36Z
    Improper Input Validation in Meinberg LTOS
    cvelistv5