CVE-2023-5683

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231010 and classified as critical. This issue affects some unknown processing of the file /sysmanage/importconf.php. The manipulation of the argument btn_file_renew leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-243059. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published: Oct 21, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-56849.8A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231012. It has been declared as critical. Affected by this vulner CVE-2023-56857.5A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problem CVE-2023-56868.8Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.CVE-2023-56878.8Cross-Site Request Forgery (CSRF) in GitHub repository mosparo/mosparo prior to 1.0.3.CVE-2023-56885.4Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.CVE-2023-56895.4Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.CVE-2023-56908.8Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2.CVE-2023-56914.8The Chatbot for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in version 2.3.9 due to insuf CVE-2023-56925.3WordPress Core is vulnerable to Sensitive Information Exposure in versions up to, and including, 6.4.3 via the redirect_guess_404_permalink CVE-2023-56939.8A vulnerability was found in CodeAstro Internet Banking System 1.0 and classified as critical. This issue affects some unknown processing of CVE-2023-56946.1A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been classified as problematic. Affected is an unknown function o CVE-2023-56956.1A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been declared as problematic. Affected by this vulnerability is a