CVE-2023-34873 | THREATINT

Description

On MOBOTIX P3 cameras before MX-V4.7.2.18 and Mx6 cameras before MX-V5.2.0.61, the tcpdump feature does not properly validate input, which allows authenticated users to execute code.

Reserved 2023-06-07 | Published 2025-05-23 | Updated 2025-05-23 | Assigner mitre

HIGH: 8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Product status

Default status

unaffected

Any version before MX-V4.7.2.18

affected

Default status

unaffected

Any version before MX-V5.2.0.61

affected

References

www.mobotix.com/en/node/13391

www.cisa.gov/news-events/ics-advisories/icsa-24-235-03

cve.org (CVE-2023-34873)

nvd.nist.gov (CVE-2023-34873)

Download JSON