CVE-2023-39008

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Aug 9, 2023

Updated: Oct 10, 2023

CWE ID 77

Summary

CVE-2023-39008 is a command injection vulnerability affecting the /api/cron/settings/setJob/ component in OPNsense Community Edition versions prior to 23.7 and Business Edition versions prior to 23.4.2. This issue grants attackers the ability to execute arbitrary system commands. Successful exploitation could lead to serious security implications, including unauthorized system access and data theft. It is strongly recommended that affected users update their OPNsense installation to the latest stable release to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

OPNsense

Affected Vendors

Opnsense

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/sG6bbb
https://www.cve.org/CVERecord?id=CVE-2023-39008
https://nvd.nist.gov/vuln/detail/CVE-2023-39008

Back to Vulnerability Database