CVE-2023-39424
Last modified
CVE-2023-39424 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. A vulnerability in RDPngFileUpload.dll, as used in the IRM Next Generation booking system, allows a remote attacker to upload arbitrary content (such as a web shell component) to the SQL database and execute it with SYSTEM privileges. This vulnerability requires authentication to be exploited but can be paired with another vulnerability in the platform (CVE-2023-39420, which grants access to hardcoded credentials) to carry the attack without having assigned credentials. . EPSS estimates a 0.74% chance of exploitation in the next 30 days.
Description
A vulnerability in RDPngFileUpload.dll, as used in the IRM Next Generation booking system, allows a remote attacker to upload arbitrary content (such as a web shell component) to the SQL database and execute it with SYSTEM privileges. This vulnerability requires authentication to be exploited but can be paired with another vulnerability in the platform (CVE-2023-39420, which grants access to hardcoded credentials) to carry the attack without having assigned credentials.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Resortdata | Internet Reservation Module Next Generation | 5.3.2.15 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-39424?
How severe is CVE-2023-39424?
How do I fix CVE-2023-39424?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-39419A vulnerability has been identified in Solid Edge SE2023 (Al…7.8
- CVE-2023-3942An 'SQL Injection' vulnerability, due to improper neutraliza…7.5
- CVE-2023-39420The RDPCore.dll component as used in the IRM Next Generation…8.8
- CVE-2023-39421The RDPWin.dll component as used in the IRM Next Generation …7.7
- CVE-2023-39422The /irmdata/api/ endpoints exposed by the IRM Next Generati…9.8
- CVE-2023-39423The RDPData.dll file exposes the /irmdata/api/common endpoin…9.1
- CVE-2023-39425Improper access control in some Intel(R) DSA software before…7.8
- CVE-2023-39427 In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt …7.8
- CVE-2023-39429Cross-site scripting vulnerability in FURUNO SYSTEMS wireles…5.4
- CVE-2023-3943Stack-based Buffer Overflow vulnerability in ZkTeco-based OE…10
- CVE-2023-39431 Sante DICOM Viewer Pro lacks proper validation of user-su…7.8
- CVE-2023-39432Improper access control element in some Intel(R) Ethernet to…7.8
Are you affected by CVE-2023-39424?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST