An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which allows authenticated users to execute arbitrary OS commands on the BioStar 2 server.
References
| Link | Resource |
|---|---|
| https://claroty.com/team82/disclosure-dashboard/cve-2023-33364 | Third Party Advisory |
| https://kb.supremainc.com/knowledge/doku.php?id=en:release_note_291 | Release Notes Vendor Advisory |
| https://claroty.com/team82/disclosure-dashboard/cve-2023-33364 | Third Party Advisory |
| https://kb.supremainc.com/knowledge/doku.php?id=en:release_note_291 | Release Notes Vendor Advisory |
Configurations
History
21 Nov 2024, 08:05
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://claroty.com/team82/disclosure-dashboard/cve-2023-33364 - Third Party Advisory | |
| References | () https://kb.supremainc.com/knowledge/doku.php?id=en:release_note_291 - Release Notes, Vendor Advisory |
08 Aug 2023, 17:51
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://claroty.com/team82/disclosure-dashboard/cve-2023-33364 - Third Party Advisory | |
| References | (MISC) https://kb.supremainc.com/knowledge/doku.php?id=en:release_note_291 - Release Notes, Vendor Advisory | |
| First Time |
Supremainc biostar 2
Supremainc |
|
| CWE | CWE-78 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| CPE | cpe:2.3:a:supremainc:biostar_2:*:*:*:*:*:*:*:* |
03 Aug 2023, 16:56
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-03 16:15
Updated : 2024-11-21 08:05
NVD link : CVE-2023-33364
Mitre link : CVE-2023-33364
CVE.ORG link : CVE-2023-33364
JSON object : View
Products Affected
supremainc
- biostar_2
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')