Vulnerability Description
This vulnerability allows an remote attacker with low privileges to misuse Improper Control of Generation of Code ('Code Injection') to gain full control of the affected device.
CVSS Score
8.8
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Frauscher | Frauscher Diagnostic System 102 | >= 2.10.0, < 2.10.2 |
Related Weaknesses (CWE)
References
- https://cert.vde.com/en/advisories/VDE-2023-049/Third Party Advisory
- https://cert.vde.com/en/advisories/VDE-2023-049/Third Party Advisory
FAQ
What is CVE-2023-5500?
CVE-2023-5500 is a vulnerability with a CVSS score of 8.8 (HIGH). This vulnerability allows an remote attacker with low privileges to misuse Improper Control of Generation of Code ('Code Injection') to gain full control of the affected device.
How severe is CVE-2023-5500?
CVE-2023-5500 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-5500?
Check the references section above for vendor advisories and patch information. Affected products include: Frauscher Frauscher Diagnostic System 102.