CVE-2023-34999: A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 (< 5.7.6) and v6 (< 6.5.0) that allows an attacker to perform…

PriorityP345high7.2CVSS 3.1

AVNACLPRHUINSUCHIHAH

EPSS

1.13%

62.4th percentile

A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 (< 5.7.6) and v6 (< 6.5.0) that allows an attacker to perform arbitrary code execution via the admin web interface.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
bosch	rts_vlink_virtual_matrix	>= 5.0.0 < 5.7.6	5.7.6
bosch	rts_vlink_virtual_matrix	>= 6.0.0 < 6.5.0	6.5.0
rts	vlink_virtual_matrix_software	>= 5.0.0 < 5.7.6	5.7.6
rts	vlink_virtual_matrix_software	>= 6.0.0 < 6.5.0	6.5.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.