CVE-2023-51906: Critical severity Yonyou YonBIP vulnerability

Published Jan 20, 2024

Updated

An issue in yonyou YonBIP v323.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component.

Affected Software

1 affected component

Yonyou YonBIP=3_23.05

Event History

Jan 20, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·02:15 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-51906?

CVE-2023-51906 has been classified as a critical severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2023-51906?

To remediate CVE-2023-51906, upgrade to the latest patched version of yonyou YonBIP beyond version 3_23.05.

What components are affected by CVE-2023-51906?

CVE-2023-51906 affects the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component of yonyou YonBIP v3_23.05.

Can an attacker exploit CVE-2023-51906 remotely?

Yes, CVE-2023-51906 allows a remote attacker to execute arbitrary code by exploiting the vulnerability.

Is there a workaround for CVE-2023-51906?

Currently, the recommended approach to mitigate CVE-2023-51906 is to upgrade the affected software, as there is no documented workaround.