CVE-2023-49959

CRÍTICO 9.8CVE-2023-49959 · Published 26/02/2024 · updated 17/06/2026

En resumen

CVE-2023-49959 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a profinet-inspektor nt (indu-sol).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.4%, mayor que el 72.1% de las vulnerabilidades.
Solución: actualizar a 2.4.1 o posterior.

Package	Affected versions	Patched versions
profinet-inspektor nt indu-sol	`< 2.4.1`	`2.4.1`

Description

In Indo-Sol PROFINET-INspektor NT through 2.4.0, a command injection vulnerability in the gedtupdater service of the firmware allows remote attackers to execute arbitrary system commands with root privileges via a crafted filename parameter in POST requests to the /api/updater/ctrl/start_update endpoint.

References

code-white.com/public-vulnerability-list · Third Party Advisory
indu-sol.com/en/products/profinet/diagnostics/profinet-inspektorr-nt · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free