CVE Catalog

CVE-2023-37569

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
24.03%

98th percentile - higher than 98% of all known CVEs

Summary

CVE-2023-37569 exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. A remote authenticated attacker could exploit this by injecting OS commands on the targeted system.

Risk Assessment

Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code on the targeted system, posing a serious security threat to the organization.

Recommendation

It is recommended to apply security patches and monitor systems for potential attempts to exploit this vulnerability.

Original NVD description (English source)

This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. A remote authenticated attacker could exploit this by injecting OS commands on the targeted system. Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code on targeted system.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS