CVE-2023-52252

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Dec 30, 2023
Updated: Jan 5, 2024
CWE ID 611

Summary

CVE-2023-52252 is a vulnerability affecting Unified Remote 3.13.0, allowing remote attackers to execute arbitrary Lua code due to a wildcarded Access-Control-Allow-Origin for the Remote upload endpoint. The base severity of this vulnerability is rated as critical with a base score of 9.8 out of 10, indicating a high level of danger to organizations. The exploitability score is 3.9 out of 10, and the impact score is 5.9 out of 10. This vulnerability has a network attack vector and can result in high integrity and confidentiality impacts. It requires no privileges or user interaction, and its attack complexity is low. To remediate this vulnerability, organizations should update their Unified Remote software to a version that addresses the issue to mitigate potential risks associated with arbitrary code execution.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-52252 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options