CVE-2023-43849

PoC —

CVSS 3.1

6.5 medium

EPSS

<1%p42

Published

May 28, 2024 (May 28, 2024)

Modified

Jun 17, 2026

Description

Incorrect access control in firmware upgrade function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to submit a firmware image via HTTP POST requests. This may result in DoS or remote code execution.

Vendors: aten
Products: pe6208 firmware
Weakness: CWE-284
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.