critical9.8Public exploit code
CVE-2023-23333
There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloa…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SolarView Compact 6.00 - Command Injection2024-03-14 · remote · hardware
Impact
There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Contec | Solarview Compact Firmware | through 6.00 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/174537/SolarView-Compact-6.00-Remote-Command-Execution.html
- https://github.com/Timorlover/CVE-2023-23333
- http://packetstormsecurity.com/files/174537/SolarView-Compact-6.00-Remote-Command-Execution.html
- https://github.com/Timorlover/CVE-2023-23333