CVE-2023-36177

Severity

critical

Source

NVD · cve

Published

2024-01-23

CVSS

9.8

Reference

https://nvd.nist.gov/vuln/detail/CVE-2023-36177

⚡ RCE shame 50/100 rce

An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API.

Players implicated

badaix · vendor snapcast · product

Description

An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.