VYPR
← All advisories
High severity8.8NVD Advisory· Published Dec 8, 2023· Updated Jun 17, 2026

CVE-2023-43743

CVE-2023-43743

Description

A SQL injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an authenticated attacker to execute arbitrary SQL queries on the backend database via the filter parameter in requests to the /newapi/ endpoint in the Zultys MX web interface.

Affected products

4
  • Zultys/MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30description
  • Zultys/MX-SEllm-fuzzy
    Range: <17.0.10 patch 17161 and <16.04 patch 16109
  • Zultys/MX-Virtualllm-fuzzy
    Range: <17.0.10 patch 17161 and <16.04 patch 16109
  • Zultys/MX250llm-fuzzy
    Range: <17.0.10 patch 17161 and <16.04 patch 16109

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.