Skip to content
COOEY

EXPOSURES › CVE-2023-51947

CVE-2023-51947

CRITICAL
DETAIL
SourceNVD · cve Published2024-01-19 CVSS9.1 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-51947 ↗
SHAME 35/100

Improper access control on nasSvr.php in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to read and modify different types of data without authentication.

▸ RECOMMENDED ACTION  Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED
actidata · vendoractinas sl 2u-8 rdx · productactinas sl 2u-8 rdx firmware · product
DESCRIPTION

Improper access control on nasSvr.php in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to read and modify different types of data without authentication.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.