CVE-2023-45239

Summary

CVE-2023-45239 is a vulnerability affecting the TAC+ (tac_plus) software before commit 4fdf178. The issue lies in a lack of input validation, allowing an attacker to manipulate pre or post authentication commands for username, rem-addr, or NAC address. Consequently, an attacker can inject shell commands, thereby gaining remote code execution on the affected tac_plus server. This vulnerability poses a significant risk and requires prompt patching to mitigate the potential threats.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.