VULNERABILITY INTELLIGENCE

CVE-2023-54329

CVSS score9.8 CRITICAL
EPSS probability1.20%
CISA KEVNot currently listed
Published2026-01-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Inbit Messenger 4.6.0 - 4.9.0 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by exploiting a stack overflow in the messenger's protocol. Attackers can send specially crafted XML packets to port 10883 with a malicious payload to trigger the vulnerability and execute commands with system privileges.

Weakness classification

  • disclosure@vulncheck.com: CWE-121
  • nvd@nist.gov: CWE-787

Primary references