CVE-2023-33443
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk88th percentile - higher than 88% of all known CVEs
Summary
The BES--6024PB-I50H1 VideoPlayTool v2.0.1.0 has incorrect access control in its administrative functionalities, allowing attackers to execute arbitrary administrative commands via a crafted payload sent to the desired endpoints.
Risk Assessment
Attackers may gain unauthorized access to administrative functions, potentially leading to serious security breaches and loss of control over the system.
Recommendation
It is recommended to update to the latest version of the software to mitigate this vulnerability and implement additional security measures to restrict access to administrative functions.
Original NVD description (English source)
Incorrect access control in the administrative functionalities of BES--6024PB-I50H1 VideoPlayTool v2.0.1.0 allow attackers to execute arbitrary administrative commands via a crafted payload sent to the desired endpoints.