Vulnerability · Published Feb 14, 2023 · Assigned by VulDB

CVE-2023-0830EasyNAS backup.pl system os command injection

Medium 6.3

In plain English

A medium-severity OS command injection in EasyNAS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 20.9% (higher than 98% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)20.9%top 2.4% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack tooling1Public PoC

Official description

A vulnerability classified as critical has been found in EasyNAS 1.1.0. Affected is the function system of the file /backup.pl. The manipulation leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.

Affected products (as reported)

Vendor	Product	Versions
n/a	EasyNAS	1.1.0

Weakness: CWE-78, CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References

VDB-220950 | EasyNAS backup.pl system os command injection vdb-entry, technical-description
VDB-220950 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #86683 | EasyNAS 1.1.0 - Authenticated OS Command Injection third-party-advisory
https://github.com/xbz0n/CVE-2023-0830 exploit
https://www.exploit-db.com/exploits/51266 exploit
https://gist.github.com/xbz0n/674af0e802efaaafe90d2f67464c2690 exploit, x_transferred