CVE-2023-3656

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by an unauthenticated remote code execution vulnerability. This vulnerability can be triggered by an HTTP endpoint exposed to the network.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94CWE-749

Affected software

VendorProductVersions
PoS/ Dienstleistung, Entwicklung & Vertrieb GmbHcashIT! - serving solutions.<= 03.A06rks

References

Timeline

Published
Oct 3, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-365608.8ASP.NET Security Feature Bypass VulnerabilityCVE-2023-365617.3Azure DevOps Server Elevation of Privilege VulnerabilityCVE-2023-365627.1Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2023-365635.5Microsoft WordPad Information Disclosure VulnerabilityCVE-2023-365646.5Windows Search Security Feature Bypass VulnerabilityCVE-2023-365657.0Microsoft Office Graphics Elevation of Privilege VulnerabilityCVE-2023-365666.5Microsoft Common Data Model SDK Denial of Service VulnerabilityCVE-2023-365677.5Windows Deployment Services Information Disclosure VulnerabilityCVE-2023-365687.0Microsoft Office Click-To-Run Elevation of Privilege VulnerabilityCVE-2023-365698.4Microsoft Office Elevation of Privilege VulnerabilityCVE-2023-36579.8A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Services System 1.0. This issue affects soCVE-2023-365707.3Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-3656: Critical severity, CVSS 9.8 | Vulnix