CVE Daily

CVE-2025-23239

When running in Appliance mode, an authenticated remote command injection vulner...

High CVSS 8.7

Overview

When running in Appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to cross a security boundary.


Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CWE: CWE-77 Published: 2025-02-05T18:15:31.373
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 8.7 (HIGH)
  • Detected tags: command_injection (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags