« Volver al listado

CVE-2023-5500

Estado: ModificadaAlta (8.8)—

This vulnerability allows an remote attacker with low privileges to misuse Improper Control of Generation of Code ('Code Injection') to gain full control of the affected device.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Frauscher — Frauscher Diagnostic System 102

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-5500",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "info@cert.vde.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "info@cert.vde.com",
      "affectedData": [
        {
          "vendor": "Frauscher",
          "product": "FDS102 for FAdC/FAdCi",
          "versions": [
            {
              "status": "affected",
              "version": "2.10.0",
              "versionType": "semver",
              "lessThanOrEqual": "2.10.1"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2023-12-11T07:15:07.160",
  "references": [
    {
      "url": "https://cert.vde.com/en/advisories/VDE-2023-049/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "info@cert.vde.com"
    },
    {
      "url": "https://cert.vde.com/en/advisories/VDE-2023-049/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "info@cert.vde.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "This vulnerability allows an remote attacker with low privileges to misuse Improper Control of Generation of Code ('Code Injection') to gain full control of the affected device."
    },
    {
      "lang": "es",
      "value": "Esta vulnerabilidad permite a un atacante remoto con pocos privilegios hacer un uso indebido del control inadecuado de generación de código (\"inyección de código\") para obtener el control total del dispositivo afectado."
    }
  ],
  "lastModified": "2026-06-17T06:48:43.510",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:frauscher:frauscher_diagnostic_system_102:*:*:*:*:*:fadc:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2FE9E9D7-A692-4C03-883A-6C62DBE46DBD",
              "versionEndExcluding": "2.10.2",
              "versionStartIncluding": "2.10.0"
            },
            {
              "criteria": "cpe:2.3:a:frauscher:frauscher_diagnostic_system_102:*:*:*:*:*:fadci:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D55CB7CF-AB9E-47C2-8E1F-F8AB89E37F7E",
              "versionEndExcluding": "2.10.2",
              "versionStartIncluding": "2.10.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "info@cert.vde.com"
}