Description
A vulnerability classified as critical has been found in EasyNAS 1.1.0. Affected is the function system of the file /backup.pl. The manipulation leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.
Metrics
CVSS 3.1 8.8/10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | EasyNAS | 1.1.0 |
References
- https://github.com/xbz0n/CVE-2023-0830
- https://vuldb.com/?ctiid.220950Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.220950Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.86683
- https://www.exploit-db.com/exploits/51266
- https://gist.github.com/xbz0n/674af0e802efaaafe90d2f67464c2690Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.220950Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.220950Third Party Advisory, VDB Entry
Timeline
- Published
- Feb 14, 2023
- Last modified
- Jun 17, 2026
- NVD status
- Modified