{"id":"CVE-2023-34999","aliases":["EUVD-2023-39037","GHSA-vm9r-3qxr-cxxp"],"status":"published","title":"A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 (\u003c 5.7...","description":"A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 (\u003c 5.7.6) and v6 (\u003c 6.5.0) that allows an attacker to perform arbitrary code execution via the admin web interface.","severity":{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.01216,"percentile":0.69005,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-77","CWE-94"],"published":"2023-09-18T10:16:14Z","modified":"2026-06-17T06:04:15Z","products":[{"vendor":"bosch","product":"rts_vlink_virtual_matrix"},{"vendor":"rts","product":"vlink virtual matrix software"}],"references":[{"url":"https://psirt.bosch.com/security-advisories/BOSCH-SA-893251-BT.html","tags":["vendor-advisory","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34999"},{"url":"https://github.com/advisories/GHSA-vm9r-3qxr-cxxp"}],"sources":{"cve":[{"id":"CVE-2023-34999","description":"A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 (\u003c 5.7.6) and v6 (\u003c 6.5.0) that allows an attacker to perform arbitrary code execution via the admin web interface.","status":"published","published":"2023-09-18T10:16:14.009Z","modified":"2024-09-25T15:35:46.96Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:35:35.912488Z"}],"euvd":[{"id":"EUVD-2023-39037","description":"A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 (\u003c 5.7.6) and v6 (\u003c 6.5.0) that allows an attacker to perform arbitrary code execution via the admin web interface.","status":"published","published":"2023-09-18T10:16:14Z","modified":"2024-09-25T15:35:46Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:28:12.46898Z"}],"ghsa":[{"id":"GHSA-vm9r-3qxr-cxxp","title":"A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 (\u003c 5.7...","description":"A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 (\u003c 5.7.6) and v6 (\u003c 6.5.0) that allows an attacker to perform arbitrary code execution via the admin web interface.","status":"published","published":"2023-09-18T12:30:16Z","modified":"2024-04-04T07:43:13Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-77","CWE-94"],"updated_at":"2026-11-02T14:56:54.282267Z"}],"nvd":[{"id":"CVE-2023-34999","description":"A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 (\u003c 5.7.6) and v6 (\u003c 6.5.0) that allows an attacker to perform arbitrary code execution via the admin web interface.","status":"published","published":"2023-09-18T11:15:41.867Z","modified":"2026-06-17T06:04:15.06Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-94","CWE-77"],"updated_at":"2026-11-02T14:08:29.595868Z"}]}}