{"id":"CVE-2023-49899","aliases":["EUVD-2023-60601","GHSA-587v-8x94-p9vx"],"status":"published","title":"Origin Validation Error in X-Rite MA-T6","description":"An unauthenticated remote attacker can execute any command on the affected device due to not correctly verifying the origin of a communication channel.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00312,"percentile":0.24263,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-346"],"published":"2026-07-16T10:11:32Z","modified":"2026-09-26T23:10:00Z","products":[{"vendor":"x-rite","product":"ma-t6"}],"references":[{"url":"https://claroty.com/team82/disclosure-dashboard/cve-2023-49899","tags":["related"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-49899"},{"url":"https://github.com/advisories/GHSA-587v-8x94-p9vx"}],"sources":{"cve":[{"id":"CVE-2023-49899","title":"Origin Validation Error in X-Rite MA-T6","description":"An unauthenticated remote attacker can execute any command on the affected device due to not correctly verifying the origin of a communication channel.","status":"published","published":"2026-07-16T10:11:32.404Z","modified":"2026-07-18T02:46:07.283Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-346"],"updated_at":"2026-11-02T14:35:12.998024Z"}],"euvd":[{"id":"EUVD-2023-60601","description":"An unauthenticated remote attacker can execute any command on the affected device due to not correctly verifying the origin of a communication channel.","status":"published","published":"2026-07-16T10:11:32Z","modified":"2026-07-18T02:46:07Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:19:50.065723Z"}],"ghsa":[{"id":"GHSA-587v-8x94-p9vx","title":"An unauthenticated remote attacker can execute any command on the affected device due to not...","description":"An unauthenticated remote attacker can execute any command on the affected device due to not correctly verifying the origin of a communication channel.","status":"published","published":"2026-07-16T12:32:28Z","modified":"2026-07-16T12:32:29Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-346"],"updated_at":"2026-11-02T15:09:33.90316Z"}],"nvd":[{"id":"CVE-2023-49899","description":"An unauthenticated remote attacker can execute any command on the affected device due to not correctly verifying the origin of a communication channel.","status":"published","published":"2026-07-16T11:16:35.597Z","modified":"2026-09-26T23:10:00.127Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-346"],"updated_at":"2026-11-02T14:09:27.733183Z"}]}}