CVE-2023-29492

NVD Published Date: April 11, 2023 at 05:15 AM

NVD Last Modified: April 18, 2023 at 02:16 AM

Download Patch

Vulnerability ID

CVE-2023-29492

Severity

CRITICAL

Severity Score

9.8

Summary

Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account. This does not provide access to stored survey or response data.

References

https://novisurvey.net/blog/novi-survey-security-advisory-apr-2023.aspx

Mitigation and Patches

Exploits

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Metasploit Payload

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE ID

CWE-94

Recent Publish

CVE-2023-27350

CVE-2023-27524

CVE-2023-28771

CVE-2023-33009

CVE-2023-33010

CVE-2023-33246

See SecOps Solution
in action

Schedule Demo

Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions

CVE-2023-29492

Recent Publish

See SecOps Solution
in action

Products

Compare

Company

Resources

Try It

CVE-2023-29492

Recent Publish

See SecOps Solutionin action

Products

Compare

Company

Resources

Try It

See SecOps Solution
in action