CVE-2023-37249

HighCVSS 8.8

Published: 25/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.60%

44th percentile - higher than 44% of all known CVEs

Summary

Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access.

Risk Assessment

Exploitation of this vulnerability could allow attackers to gain unauthorized access to the system, posing a serious security threat to the organization.

Recommendation

It is recommended to update Infoblox NIOS to the latest version to mitigate this vulnerability and implement additional security measures.

Other vulnerabilities in Infoblox NIOS

CVE-2022-28975Medium
A stored cross-site scripting (XSS) vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field.

Original NVD description (English source)

Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS