CVE-2023-42797
CVSS 3.1 Score 6.6 of 10 (medium)
Details
Summary
CVE-2023-42797 is a vulnerability that affects CP-8031 MASTER MODULE and CP-8050 MASTER MODULE devices running versions prior to CPCI85 V05.20. The flaw exists in the network configuration service, which improperly handles the conversion of ipv4 addresses and could result in the use of an uninitialized variable during subsequent validation steps. An authenticated remote attacker could exploit this vulnerability by uploading specially crafted network configuration to execute commands with root privileges during device startup. The vulnerability has a CVSS base score of 6.6, indicating a medium severity level, and poses a high risk to organizations as it could lead to unauthorized access, compromised integrity, and confidentiality impacts on affected devices. To mitigate this vulnerability, users should update their devices to CPCI85 V05.20 or newer versions as recommended by the vendor.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions