Evil-DB LogoEvil-DB
← All CVEs

CVE-2023-47415

high · 7.5

Cypress Solutions CTM-200 v2.7.1.5600 and below was discovered to contain an OS command injection vulnerability via the cli_text parameter.

7.5
CVSS
13.8%
EPSS (exploit prob.)
96th
EPSS percentile
2024-03-07
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses

CWE-78

Affected products

VendorProductAffected versions
cypressctm-200_firmware<= 2.7.1.5600-113
cypressctm-200all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-47415