CVE-2023-33466
Last modified
CVE-2023-33466 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file system, and in specific deployment scenarios allows the attacker to overwrite the configuration, which can be exploited to trigger Remote Code Execution (RCE).. EPSS estimates a 3.10% chance of exploitation in the next 30 days.
Description
Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file system, and in specific deployment scenarios allows the attacker to overwrite the configuration, which can be exploited to trigger Remote Code Execution (RCE).
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Orthanc-Server | Orthanc | < 1.12.0 |
References
- https://discourse.orthanc-server.org/t/security-advisory-for-orthanc-deployments-running-versions-before-1-12-0/3568Issue Tracking, Vendor Advisory
- https://discourse.orthanc-server.org/t/security-advisory-for-orthanc-deployments-running-versions-before-1-12-0/3568Issue Tracking, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-33466?
How severe is CVE-2023-33466?
How do I fix CVE-2023-33466?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-33443Incorrect access control in the administrative functionaliti…9.8
- CVE-2023-3345The LMS by Masteriyo WordPress plugin before 1.6.8 does not …6.5
- CVE-2023-33457In Sogou Workflow v0.10.6, memcpy a negtive size in URIParse…8.8
- CVE-2023-3346Buffer Copy without Checking Size of Input ('Classic Buffer …9.8
- CVE-2023-33460There's a memory leak in yajl 2.1.0 with use of yajl_tree_pa…6.5
- CVE-2023-33461iniparser v4.1 is vulnerable to NULL Pointer Dereference in …5.5
- CVE-2023-33468KramerAV VIA Connect (2) and VIA Go (2) devices with a versi…9.1
- CVE-2023-33469In instances where the screen is visible and remote mouse co…7.8
- CVE-2023-3347A vulnerability was found in Samba's SMB2 packet signing mec…5.9
- CVE-2023-33472An issue was discovered in Scada-LTS v2.7.5.2 build 45518836…8.8
- CVE-2023-33476ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vu…9.8
- CVE-2023-33477In Harmonic NSG 9000-6G devices, an authenticated remote use…6.5
Are you affected by CVE-2023-33466?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST