Vulnerability Details : CVE-2023-41921
A vulnerability allows attackers to download source code or an executable from a remote location and execute the code without sufficiently verifying the origin and integrity of the code. This vulnerability can allow attackers to modify the firmware before uploading it to the system, thus achieving the modification of the target’s integrity to achieve an insecure state.
Published
2024-07-02 07:42:34
Updated
2024-07-02 12:09:17
Products affected by CVE-2023-41921
Please log in to view affected product information.
Exploit prediction scoring system (EPSS) score for CVE-2023-41921
0.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 20 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-41921
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
9.8
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
National Cyber Security Centre Netherlands (NCSC-NL) | 2024-07-02 |
|
9.8
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
N/A
|
N/A
|
National Cyber Security Centre Netherlands (NCSC-NL) | 2024-07-02 |
CWE ids for CVE-2023-41921
-
The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.Assigned by:
- cert@ncsc.nl (Secondary)
- cf4a7ff5-dd38-4ede-a530-ffaa7ea59c39 (Primary)
References for CVE-2023-41921
-
https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273
NCSC Advisories
Jump to