1. Home
  2. CVE Database
  3. CVE-2023-24835
HIGH · 7.2

CVE-2023-24835

Softnext Technologies Corp.’s SPAM SQR has a vulnerability of Code Injection within its specific function. An authenticated remote attacker with administrator privilege can exploit this vulnerability ...

Vulnerability Description

Softnext Technologies Corp.’s SPAM SQR has a vulnerability of Code Injection within its specific function. An authenticated remote attacker with administrator privilege can exploit this vulnerability to execute arbitrary system command to perform arbitrary system operation or disrupt service.

CVSS Score

7.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
SoftnextSpam Sqr< 2.221231

Related Weaknesses (CWE)

CWE-94

References

FAQ

What is CVE-2023-24835?

CVE-2023-24835 is a vulnerability with a CVSS score of 7.2 (HIGH). Softnext Technologies Corp.’s SPAM SQR has a vulnerability of Code Injection within its specific function. An authenticated remote attacker with administrator privilege can exploit this vulnerability ...

How severe is CVE-2023-24835?

CVE-2023-24835 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-24835?

Check the references section above for vendor advisories and patch information. Affected products include: Softnext Spam Sqr.