rodolfomarianocy/Unauthenticated-RCE-FUXA-CVE-2023-33831

rodolfomarianocy/Unauthenticated-RCE-FUXA-CVE-2023-33831

GitHubGitHub
GitHubgithub.com
Releases0
Stars8
Description and exploit of CVE-2023-33831 affecting FUXA web-based Process Visualization (SCADA/HMI/Dashboard) software.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-33831↗
9.8 CRITICAL—

A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request.