CVE-2023-31493

CVSS 3.1 Score 6.6 of 10 (medium)

Details

Published Oct 15, 2024

Updated: Oct 16, 2024

CWE ID 94

Summary

CVE-2023-31493 is a Remote Code Execution (RCE) vulnerability affecting ZoneMinder up to version 1.36.33. An attacker can exploit this flaw by creating a new .php log file in the language folder, which allows them to execute a crafted payload and escalate privileges. This vulnerability grants attackers the ability to execute any commands on the remote system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

ZoneMinder

Affected Vendors

Zoneminder

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/zhIAD5
https://www.cve.org/CVERecord?id=CVE-2023-31493
https://nvd.nist.gov/vuln/detail/CVE-2023-31493

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Measuring the US-China AI Gap

TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered

Uncovering MintsLoader With Recorded Future Malware Intelligence Hunting

Know What Matters

For Customers

For Partners