VULNERABILITY INTELLIGENCE

CVE-2023-3313

CVSS score7.8 HIGH
EPSS probability0.47%
CISA KEVNot currently listed
Published2023-07-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

An OS common injection vulnerability exists in the ESM certificate API, whereby incorrectly neutralized special elements may have allowed an unauthorized user to execute system command injection for the purpose of privilege escalation or to execute arbitrary commands.

Weakness classification

  • trellixpsirt@trellix.com: CWE-78
  • nvd@nist.gov: CWE-78

Primary references