CVE-2023-22581
White Rabbit Switch - Unauthenticated remote code execution
- State
- Published
- Severity
- 9.8 Critical
- Published
- Apr 24, 2023
- Updated
- Mar 11, 2025
- Reserved
- Jan 3, 2023
Description
White Rabbit Switch contains a vulnerability which makes it possible for an attacker to perform system commands under the context of the web application (the default installation makes the webserver run as the root user).
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | DIVD |
Weaknesses
- CWE-20 Improper Input Validation
Affected Products
| Product | Versions |
|---|---|
White Rabbit SwitchCERN |
|
References
- https://csirt.divd.nl/CVE-2023-22581/third-party-advisory
- https://csirt.divd.nl/DIVD-2022-00068/third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.