by Kastro
Paper/Archive/CVE-2023-22581

CVE-2023-22581

CERN White Rabbit Switch — White Rabbit Switch - Unauthenticated remote code execution

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (NVD, CNA agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 53.6.536 × 2010.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

White Rabbit Switch contains a vulnerability which makes it possible for an attacker to perform system commands under the context of the web application (the default installation makes the webserver run as the root user).

Affected

ProductAffectedFixed inSource
White Rabbit Switch< v6.0.1 – v6.0.1–CNA

Scores by source

DIVD (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

writeupcsirt.divd.nl/CVE-2023-22581writeupcsirt.divd.nl/DIVD-2022-00068