CVE-2021-44255

Description

Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606 allows a remote attacker to upload a configuration backup file containing a malicious python pickle file which will execute arbitrary code on the server.

Risk Information

Base Score

7.2

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

13.636

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2021-44255,CVE-2022-25568 are affected in Python-motioneye 0.42.1	Windows
Vulnerabilities CVE-2021-44255,CVE-2022-25568 are affected in Python-motioneye for linux 0.42.1	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234