CVE-2023-27514: Command Injection
OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to execute an arbitrary OS command.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-27514?
CVE-2023-27514 is an OS command injection vulnerability found in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10.
How severe is CVE-2023-27514?
CVE-2023-27514 has a severity rating of 8.8, which is classified as high.
Which software versions are affected by CVE-2023-27514?
CVE-2023-27514 affects SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10.
How can an attacker exploit CVE-2023-27514?
A remote authenticated attacker can exploit CVE-2023-27514 by executing an arbitrary OS command through the download page of the affected software.
Are there any fixes or patches available for CVE-2023-27514?
Yes, Contec has provided a security advisory and a firmware update on their website to address CVE-2023-27514. Please refer to the provided references for more information.