CVE-2023-33443

Incorrect access control in the administrative functionalities of BES--6024PB-I50H1 VideoPlayTool v2.0.1.0 allow attackers to execute arbitrary administrative…

Critical · published June 8, 2023

CVSS v3.1
9.8
EPSS
4%
Percentile
89.1
In the wild
Unconfirmed
What it is

🚨 A crafty payload could let attackers send arbitrary administrative commands straight to your video tool! 🔥 Think of this vulnerability as leaving the backdoor of a high-security control room wide open — anyone with a little ingenuity can walk right in and take control. It's like inviting a stranger to adjust your settings without so much as a background check! An attacker could seize control of the BES--6024PB-I50H1 VideoPlayTool, executing commands with all the authority of an admin. This means they could manipulate settings, access sensitive data, or even disrupt services entirely, leading to potentially devastating consequences for your video operations.

Put simply

Think of this vulnerability as leaving the backdoor of a high-security control room wide open — anyone with a little ingenuity can walk right in and take control. It's like inviting a stranger to adjust your settings without so much as a background check! This vulnerability arises from incorrect access controls in the administrative functionalities of the video tool, allowing attackers to send crafted requests that bypass security and execute unauthorized commands.

What to do

An attacker could seize control of the BES--6024PB-I50H1 VideoPlayTool, executing commands with all the authority of an admin. This means they could manipulate settings, access sensitive data, or even disrupt services entirely, leading to potentially devastating consequences for your video operations. To safeguard your system, immediately upgrade to the patched version of BES--6024PB-I50H1 VideoPlayTool. Review your access control policies and ensure that only authorized personnel can execute administrative functions. Regularly monitor your logs for any suspicious activities. You've got this! By taking these steps, you'll enhance your security and keep your systems safe from unwanted intrusions. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03501 · 89.1th percentile
Published
2023-06-08T00:00Z
EPSS history
Timeline
  • 08 JUN 00:00Z
    Incorrect access control in the administrative functionalities of BES--6024PB-I50H1 VideoPlayTool v2.0.1.0 allow attackers to execute arbitrary administrative…
    cvelistv5