CVE-2023-22371: Command Injection
Published Jul 6, 2023
·Updated
An os command injection vulnerability exists in the liburvpn.so createprivatekey functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to command execution. An attacker can send a malicious packet to trigger this vulnerability.
Affected Software
1 affected component
Milesight Milesightvpn=2.0.2
Event History
Jul 6, 2023
CVE Published
via MITRE·02:53 PM
Data Sourced
via MITRE·02:53 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-22371?
CVE-2023-22371 is rated as a critical severity vulnerability due to its potential for command execution.
2
How do I fix CVE-2023-22371?
To fix CVE-2023-22371, upgrade to a patched version of Milesight VPN that addresses this vulnerability.
3
What systems are affected by CVE-2023-22371?
CVE-2023-22371 affects Milesight VPN version 2.0.2 specifically.
4
What type of vulnerability is CVE-2023-22371?
CVE-2023-22371 is an OS command injection vulnerability.
5
How can an attacker exploit CVE-2023-22371?
An attacker can exploit CVE-2023-22371 by sending a specially-crafted network request that leads to command execution.