CVE-2023-30459
Published: 14 April 2023
Summary
CVE-2023-30459 is a high-severity an unspecified weakness vulnerability in Smartptt Smartptt Scada. Its CVSS base score is 7.2 (High).
Operationally, ranked in the top 3.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
CVE-2023-30459 affects SmartPTT SCADA version 1.1.0.0 and permits remote code execution through the product's administrator control panel. An attacker supplies a malicious C# script via the server settings interface, which the application then executes on the server.
The vulnerability requires administrator privileges and is reachable over the network on the default port 8101. Successful exploitation grants the attacker full control over the server, including the ability to read, modify, or delete data and to impact availability.
Public references include a proof-of-concept repository and the vendor site, but no vendor advisory or patch information is provided in the available references. The EPSS score reached a peak of 0.4698 before settling at the current value of 0.3360.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-34876
Vulnerability details
SmartPTT SCADA 1.1.0.0 allows remote code execution (when the attacker has administrator privileges) by writing a malicious C# script and executing it on the server (via server settings in the administrator control panel on port 8101, by default).
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.