CVE-2023-43322
Last modified
CVE-2023-43322 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.10, and v5.10.0 to v5.10.3 was discovered to contain a command injection vulnerability via the endpoint /v1/system/toolkit/files/.. EPSS estimates a 1.09% chance of exploitation in the next 30 days.
Description
ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.10, and v5.10.0 to v5.10.3 was discovered to contain a command injection vulnerability via the endpoint /v1/system/toolkit/files/.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Zpesystems | Nodegrid Os | >= 5.0.0, < 5.0.18 |
| Zpesystems | Nodegrid Os | >= 5.2.0, < 5.2.20 |
| Zpesystems | Nodegrid Os | >= 5.4.0, < 5.4.17 |
| Zpesystems | Nodegrid Os | >= 5.6.0, < 5.6.14 |
| Zpesystems | Nodegrid Os | >= 5.8.0, < 5.8.11 |
| Zpesystems | Nodegrid Os | >= 5.10.0, < 5.10.4 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-43322?
How severe is CVE-2023-43322?
How do I fix CVE-2023-43322?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-43317An issue in Coign CRM Portal v.06.06 allows a remote attacke…8.8
- CVE-2023-43318TP-Link JetStream Smart Switch TL-SG2210P 5.0 Build 20211201…8.8
- CVE-2023-43319Cross Site Scripting (XSS) vulnerability in the Sign-In page…6.1
- CVE-2023-4332Broadcom RAID Controller web interface is vulnerable due to …7.5
- CVE-2023-43320An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 t…8.8
- CVE-2023-43321File Upload vulnerability in Digital China Networks DCFW-180…8.8
- CVE-2023-43323mooSocial 3.1.8 is vulnerable to external service interactio…6.5
- CVE-2023-43325A reflected cross-site scripting (XSS) vulnerability in the …6.1
- CVE-2023-43326A reflected cross-site scripting (XSS) vulnerability exisits…6.1
- CVE-2023-4333Broadcom RAID Controller web interface doesn’t enforce SSL c…5.5
- CVE-2023-43331A cross-site scripting (XSS) vulnerability in the Add User f…5.4
- CVE-2023-43336Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15…8.8
Are you affected by CVE-2023-43322?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST