CVE-2023-36177 - An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitr

CVE-2023-36177

Summary

An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API.

References

http://snapcast.com
https://oxnan.com/posts/Snapcast_jsonrpc_rce

Vulnerable Configurations

cpe:2.3:a:badaix:snapcast:0.27.0:*:*:*:*:*:*:*
cpe:2.3:a:badaix:snapcast:0.27.0:*:*:*:*:*:*:*

CVSS

Base:	None
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

Last major update

04-09-2024 - 20:35

Published

23-01-2024 - 22:15

Last modified

04-09-2024 - 20:35