CVE-2023-3656

CRITICAL

cashit! < 03.a06rks_2023.02.37 - Unauthenticated Remote Code Execution via HTTP Endpoint

Title source: llm

Description

cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by an unauthenticated remote code execution vulnerability. This vulnerability can be triggered by an HTTP endpoint exposed to the network.

References (2)

Core 2

Core References

Technical Description

https://doi.org/10.35011/ww2q-d522

Product

https://www.cashit.at/

Scores

CVSS v3 9.8

EPSS 0.0099

EPSS Percentile 57.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-749 CWE-94

Status published

Products (1)

cashit/cashit\! < 03.a06rks_2023.02.37

Published Oct 03, 2023

Tracked Since Feb 18, 2026