CVE-2023-5684: Byzoro Smart S85F Management Platform importexport.php os command injection
First published: Sat Oct 21 2023(Updated: )
A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20231012. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /importexport.php. The manipulation leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-243061 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| <=2023-10-12 | ||
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for Beijing Baichuo Smart S85F Management Platform importexport.php os command injection?
The vulnerability ID is CVE-2023-5684.
What is the severity of CVE-2023-5684?
The severity of CVE-2023-5684 is critical.
How does the vulnerability in Beijing Baichuo Smart S85F Management Platform importexport.php occur?
The vulnerability occurs due to an os command injection in the file /importexport.php.
Can the attack be launched remotely?
Yes, the attack can be launched remotely.
Is there a fix available for CVE-2023-5684?
There is no fix available for CVE-2023-5684 at the moment. It is recommended to follow the vendor's instructions or security advisories for any updates or patches.
- collector/nvd-index
- agent/first-publish-date
- agent/author
- agent/weakness
- agent/type
- agent/severity
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/event
- agent/description
- agent/tags
- agent/softwarecombine
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- vendor/byzoro