by Kastro
Paper/Archive/CVE-2023-3656

CVE-2023-3656

PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH cashIT! - serving solutions. — Unauthenticated Remote Code Execution

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 68.3.683 × 2013.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by an unauthenticated remote code execution vulnerability. This vulnerability can be triggered by an HTTP endpoint exposed to the network.

Affected

ProductAffectedFixed inSource
cashIT! - serving solutions.≤ 03.A06rks–CNA

Scores by source

CyberDanube (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refcashit.atrefdoi.org/10.35011/ww2q-d522