CVE-2023-26999
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk60th percentile - higher than 60% of all known CVEs
Summary
An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file.
Risk Assessment
An attacker can take control of the nGeniusOne system, leading to a breach of confidentiality, integrity, and availability of data, as well as disruption of network monitoring.
Recommendation
Immediately update NetScout nGeniusOne to the latest available version and restrict file uploads to trusted sources only.
Other vulnerabilities in NetScout nGeniusOne
See all- CVE-2023-27000Medium
A Cross-Site Scripting (XSS) vulnerability was found in NetScout nGeniusOne version 6.3.4. It allows a remote attacker to execute arbitrary code via the 'name' parameter on the Profile and Exclusion List pages.
- CVE-2023-26998Medium
A Cross-Site Scripting (XSS) vulnerability was found in NetScout nGeniusOne version 6.3.4. It allows a remote attacker to execute arbitrary code via the 'creator' parameter on the Alert Configuration page.
Original NVD description (English source)
An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file.