CVE-2023-48375
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Dec 15, 2023
Updated: Dec 20, 2023
CWE ID 862
Summary
CVE-2023-48375 is a vulnerability affecting SmartStar Software's CWS, a web-based integration platform. The issue involves missing authorization controls, allowing authenticated users with normal privileges to execute administrator-level commands. This can lead to arbitrary system operations and potential disruption of services. Users are advised to apply the necessary patches to mitigate this risk, as an exploit may result in significant security implications.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share