Veille CVE

Semaine du 8 mai au 14 mai 2023

2 CVE sur 18

Critique 2 Élevée 9 Moyenne 4 Faible 3 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2023-27407 9.9 Critique

    Siemens SCALANCE LPE9403 · Siemens scalance lpe9403 firmware

    A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected device does not properly validate user input, making it susceptible to command injection. This could allow an authenticated remote attacker to access the underlying operating system as the root user.

  2. CVE-2023-31039 9.8 Critique

    Apache Software Foundation Apache bRPC · apache brpc

    Security vulnerability in Apache bRPC <1.5.0 on all platforms allows attackers to execute arbitrary code via ServerOptions::pid_file. An attacker that can influence the ServerOptions pid_file parameter with which the bRPC server is started can execute arbitrary code with the permissions of the bRPC process. Solution: 1. upgrade to bRPC >= 1.5.0, download link:  https://dist.apache.org/repos/dist/release/brpc/1.5.0/ https://dist.apache.org/repos/dist/release/brpc/1.5.0/ 2. If you are using an old version of bRPC and hard to upgrade, you can apply this patch:  https://github.com/apache/brpc/pull/2218 https://github.com/apache/brpc/pull/2218