CVE-2023-38318

Summary

CVE-2023-38318 is a vulnerability affecting OpenNDS versions prior to 10.1.3. The issue arises from the software's failure to sanitize the gateway FQDN entry in its configuration file. This flaw grants attackers, who have access to the file, the ability to execute arbitrary operating system commands. This vulnerability poses a serious risk, as unauthorized command execution can lead to significant system compromise. To mitigate this risk, it is recommended that users promptly update to the latest version of OpenNDS.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.