CVE-2023-43744

An OS command injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an administrator to execute arbitrary OS commands via a file name parameter in a patch application function. The Zultys MX Administrator client has a "Patch Manager" section that allows administrators to apply patches to the device. The user supplied filename for the patch file is passed to a shell script without validation. Including bash command substitution characters in a patch file name results in execution of the provided command.

• CWE-78

• https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0002.mdThird Party Advisory
• https://mxvirtual.comProduct
• https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0002.mdThird Party Advisory
• https://mxvirtual.comProduct

Published

Dec 8, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-43739The 'bookisbn' parameter of the cart.php resource does not …9.8
• CVE-2023-4374The WP Remote Users Sync plugin for WordPress is vulnerable …4.3
• CVE-2023-43740Online Book Store Project v1.0 is vulnerable to an Insecure …8.8
• CVE-2023-43741A time-of-check-time-of-use race condition vulnerability in …7
• CVE-2023-43742An authentication bypass in Zultys MX-SE, MX-SE II, MX-E, MX…9.8
• CVE-2023-43743A SQL injection vulnerability in Zultys MX-SE, MX-SE II, MX-…8.8
• CVE-2023-43745Improper input validation in some Intel(R) CBI software befo…2.8
• CVE-2023-43746 When running in Appliance mode, an authenticated user assig…8.7
• CVE-2023-43747Incorrect default permissions for some Intel(R) Connectivity…6.7
• CVE-2023-43748Improper access control in some Intel(R) GPA Framework softw…7.8
• CVE-2023-43749Rejected reason: This is unused.
• CVE-2023-43751Uncontrolled search path in Intel(R) Graphics Command Center…6.7