VULNERABILITY INTELLIGENCE

CVE-2023-40361

CVSS score7.8 HIGH

EPSS probability0.29%

CISA KEVNot currently listed

Published2023-10-20

Last modified2026-06-17

Description

SECUDOS Qiata (DOMOS OS) 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker needs access as a low-privileged user to the underlying DOMOS system. Every user on the system has write permission for previewRm.sh, which is executed by the root user.