CVE-2023-22581

9.8 criticalEPSS 0.7%

Critical (9.8) in home.cern white rabbit switch firmware. EPSS 0.7% chance of exploitation in the next 30 days.

White Rabbit Switch contains a vulnerability which makes it possible for an attacker to perform system commands under the context of the web application (the default installation makes the webserver run as the root user).

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2023-04-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

home.cern:white_rabbit_switch_firmware

References

https://csirt.divd.nl/CVE-2023-22581/
https://csirt.divd.nl/DIVD-2022-00068/
https://vuldb.com/?id.227269
https://csirt.divd.nl/CVE-2023-22581/
https://csirt.divd.nl/DIVD-2022-00068/

Check your stack JSON