CVE Catalog

CVE-2023-26999

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.05%

60th percentile - higher than 60% of all known CVEs

Summary

An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file.

Risk Assessment

An attacker can take control of the nGeniusOne system, leading to a breach of confidentiality, integrity, and availability of data, as well as disruption of network monitoring.

Recommendation

Immediately update NetScout nGeniusOne to the latest available version and restrict file uploads to trusted sources only.

Original NVD description (English source)

An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS