High 1 exploited CVE WID-SEC-2023-2870 1 CVE

SysAid Technologies Ltd SysAid: Schwachstelle ermöglicht Codeausführung

Published Nov 9, 2023 · Updated Nov 9, 2023 · de-DE

Vendor: SysAid Product: Ltd SysAid < 23.3.36 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in SysAid Technologies Ltd SysAid ausnutzen, um beliebigen Programmcode auszuführen.

Product

SysAid ist eine IT-Service-Management-(ITSM)-Plattform

Vulnerabilities 1

Critical 9.8

CVE-2023-47246 Exploited · Ransomware Public exploit Scanner template EPSS 99%

In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a …

Nov 10, 2023
KEV Nov 13, 2023

Revision history

2023-11-09 #1
Initiale Fassung

References

NIST Vulnerability Database vom 2023-11-09
https://nvd.nist.gov/vuln/detail/CVE-2023-47246
SysAid Blog vom 2023-11-09
https://www.sysaid.com/blog/service-desk/on-premise-software-security-vulnerability-notification