CVE-2023-42419

Summary

CVE-2023-42419: A vulnerability was discovered in Cybellum's QCOW air-gapped distribution (China Edition) Maintenance Server, affecting versions 2.15.5 through 2.27. The server was compiled with a hard-coded private cryptographic key, which could allow administrative attackers with server access to run commands on the system. This issue was resolved in version 2.28, but earlier versions and distributions for the rest of the world remain unaffected.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.