CVE-2023-22344

  1. Reconshell
  2. Vulnerabilities (CVE)
  3. CVE-2023-22344
Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22336 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.

9.8 /10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://jvn.jp/en/jp/JVN57224029/ Third Party Advisory
https://www.dos-osaka.co.jp/news/2023/03/230301.html Vendor Advisory
Advertisement

NeevaHost hosting service
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:dos-osaka:rakuraku_pc_cloud_agent:*:*:*:*:*:*:*:*
cpe:2.3:a:dos-osaka:ss1:*:*:*:*:*:*:*:*
Information

Published : 2023-03-05 16:15

Updated : 2023-03-13 10:54

NVD link : CVE-2023-22344

Mitre link : CVE-2023-22344

JSON object : View

CWE
CWE-798

Use of Hard-coded Credentials

Advertisement

dedicated server usa
Products Affected

dos-osaka

  • rakuraku_pc_cloud_agent
  • ss1