CVE-2023-29930
Published: 10 May 2023
Summary
CVE-2023-29930 is a high-severity Unrestricted Upload of File with Dangerous Type (CWE-434) vulnerability in Genesys Tftp Server. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 5.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2023-29930 affects the Genesys CIC Polycom phone provisioning TFTP Server in all versions. The flaw permits remote arbitrary code execution through the login credentials presented on the TFTP server configuration page and is tracked under CWE-434.
An attacker with low-privilege network access can supply malicious credentials or payloads to the configuration interface, resulting in full compromise of confidentiality, integrity, and availability on the affected server.
Public references include a GitHub repository named TFTPlunder that demonstrates the issue and Genesys documentation describing TFTP server configuration, though no vendor advisory or patch details are listed among the provided sources.
EPSS scores for the CVE rose from a low baseline to a peak of 0.2435 with a current value of 0.1530, indicating that exploitation interest increased after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-33461
Vulnerability details
An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker to execute arbitrary code via the login crednetials to the TFTP server configuration page.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Requiring identifiable owners for portable devices reduces the attack surface for unrestricted uploads of dangerous file types via anonymous media.
Dangerous file uploads can be detonated in the chamber to determine malice before any production write or execution occurs.
Prevents unrestricted writing of arbitrary or malicious firmware by keeping hardware write-protect enabled except under tightly controlled manual procedures.
Scans files from external sources on download/open/execute, blocking unrestricted uploads of dangerous file types.