What is CVE-2023-28701?

CVE-2023-28701 is a critical-severity vulnerability in Elite Web Fax, classified under SQL Injection. CVSS score: 9.8/10. Published 2023-06-02.

How severe is CVE-2023-28701?

Critical severity. CVSS v3 base score is 9.8 out of 10.

SQL Injection in Elite Web Fax

CVE-2023-28701

ELITE TECHNOLOGY CORP. Web Fax has a vulnerability of SQL Injection. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to perform arbitrary system commands, disrupt service or terminate service.

Vulnerability class: SQL Injection

EPSS: 0.009 (55.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Elite Web Fax — versions 0
Elite Webfax

Weakness classification (CWE)

CWE-89 — SQL Injection

References

twcert@cert.org.tw (Third Party Advisory)

Frequently asked questions

What is CVE-2023-28701?: CVE-2023-28701 is a critical-severity vulnerability in Elite Web Fax, classified under SQL Injection. CVSS score: 9.8/10. Published 2023-06-02.
How severe is CVE-2023-28701?: Critical severity. CVSS v3 base score is 9.8 out of 10.