CVE-2023-38996

MediumCVSS 6.7

Published: 22/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

32th percentile - higher than 32% of all known CVEs

All versions of Douran DSGate have an issue that allows a local authenticated privileged attacker to execute arbitrary code via the debug command.

An attacker could exploit this vulnerability to run malicious code, potentially leading to system takeover or data leakage.

It is recommended to update Douran DSGate to the latest version and restrict access to the debug function to trusted users.

Original NVD description (English source)

An issue in all versions of Douran DSGate allows a local authenticated privileged attacker to execute arbitrary code via the debug command.