CVE-2023-51892

An attacker sends a specially crafted script to the FrameworkShellController component in the Weaver E-Cology application. This component processes the submitted data in an unsafe manner, resulting in execution of the delivered code on the server side. The attack requires no authentication or user interaction, and the network vector means it can be conducted remotely over the Internet.

An attacker can gain full control over the server — in terms of confidentiality, integrity, and availability of data and the system. System takeover, data theft, malicious software installation, or further lateral movement within the organization's network is possible.

Apply patches available from the manufacturer according to the references. The manufacturer is available at weaver.com.cn. Until the update is deployed, it is recommended to restrict access to the FrameworkShellController component at the firewall or reverse proxy level and isolate the system from the public Internet.

Weaver E-Cology version 10.0.2310.01