Critical Remote Code Execution Flaw Discovered in SetParameter Command
A critical vulnerability identified as CVE-2023-49900 allows unauthenticated remote attackers to execute arbitrary code due to improper input sanitization.
A security flaw tracked as GHSA-3g8c-pp6x-x9gw, or CVE-2023-49900, has been identified in the SetParameter command. The vulnerability stems from incorrectly sanitized user input, which permits an unauthenticated remote attacker to perform remote code execution.
With a critical CVSS score of 9.8, this vulnerability poses a significant risk to affected systems. The lack of authentication requirements increases the potential impact, as attackers can exploit the flaw remotely without prior access.
Users and administrators are advised to monitor official security updates and apply patches as soon as they are made available to mitigate the risk of unauthorized code execution.
Sources
- GitHub Security Advisories Original source
Continue Reading
SecurityFulcrumSec Claims Manchester Airport Breach, 86 GB Stolen
Extortion group FulcrumSec says it stole 86 GB from Manchester Airports Group, exposing detailed travel data.
SecurityAnthropic tackles Claude session hijacking via infostealers
Anthropic warns that infostealer malware is stealing Claude login sessions to drain accounts.
SecurityAI agents can be tricked into installing malware via unclaimed code packages
Researchers found 120 unregistered domains in AI documentation that could be hijacked to infect corporate networks.