CVE-2023-42797

CVSS 3.1 Score 6.6 of 10 (medium)

Details

Published Jan 9, 2024
Updated: Jan 16, 2024
CWE ID 908

Summary

CVE-2023-42797 is a vulnerability that affects CP-8031 MASTER MODULE and CP-8050 MASTER MODULE devices running versions prior to CPCI85 V05.20. The flaw exists in the network configuration service, which improperly handles the conversion of ipv4 addresses and could result in the use of an uninitialized variable during subsequent validation steps. An authenticated remote attacker could exploit this vulnerability by uploading specially crafted network configuration to execute commands with root privileges during device startup. The vulnerability has a CVSS base score of 6.6, indicating a medium severity level, and poses a high risk to organizations as it could lead to unauthorized access, compromised integrity, and confidentiality impacts on affected devices. To mitigate this vulnerability, users should update their devices to CPCI85 V05.20 or newer versions as recommended by the vendor.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-42797 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options