CVE-2023-51892

CriticalCVSS 9.8

Published: 20/01/2024(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.97%

58th percentile - higher than 58% of all known CVEs

Summary

An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script sent to the FrameworkShellController component.

Risk Assessment

An attacker can take over the server, steal data, or install malware, posing a critical threat to the confidentiality, integrity, and availability of the system.

Recommendation

Immediately update weaver e-cology to the latest available version and restrict access to the FrameworkShellController component to trusted IP addresses only.

Original NVD description (English source)

An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellController component.