CVE-2023-0830

5.3 mediumEPSS 21%

A vulnerability classified as critical has been found in EasyNAS 1.1.0. Affected is the function system of the file /backup.pl. The manipulation leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.

Severity

CVSS 4.0

5.3 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 21% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWEs: CWE-77, CWE-78
Published: 2023-02-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

easynas:easynas

References

https://github.com/xbz0n/CVE-2023-0830
https://vuldb.com/?ctiid.220950
https://vuldb.com/?id.220950
https://vuldb.com/?submit.86683
https://www.exploit-db.com/exploits/51266

Check your stack JSON