Vulnerability Details CVE-2023-51837
Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 20.0%
CVSS Severity
CVSS v3 Score 9.8
References
- https://github.com/Ylianst/MeshCentral/blob/master/mpsserver.js
- https://github.com/tianjk99/Cryptographic-Misuses/blob/main/Bug_MeshCentral.md
- https://github.com/tianjk99/Cryptographic-Misuses/blob/main/CVE-2023-51837.md
- https://github.com/Ylianst/MeshCentral/blob/master/mpsserver.js
- https://github.com/tianjk99/Cryptographic-Misuses/blob/main/Bug_MeshCentral.md
- https://github.com/tianjk99/Cryptographic-Misuses/blob/main/CVE-2023-51837.md
Products affected by CVE-2023-51837
-
cpe:2.3:a:meshcentral:meshcentral:1.1.16