VULNERABILITY INTELLIGENCE
CVE-2023-1731
CVSS score7.2 HIGH
EPSS probability0.97%
CISA KEVNot currently listed
Published2023-04-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary commands.
Weakness classification
- info@cert.vde.com: CWE-434
- nvd@nist.gov: CWE-434
Primary references
- info@cert.vde.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory