CVE Catalog
CVE-2023-37199
MediumCVSS 6.8Exploitation Probability (EPSS)
Elevated risk0.75%
50th percentile - higher than 50% of all known CVEs
Summary
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE tampers with backups which are then manually restored.
Risk Assessment
This vulnerability poses a risk of remote code execution, potentially leading to serious security breaches in the system.
Recommendation
It is recommended to restrict access to backup restoration functions and implement monitoring mechanisms for administrator actions.
Original NVD description (English source)
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE tampers with backups which are then manually restored.