CVE-2023-38198General(acme.sh_project / acme.sh)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023.

acme.sh_project CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

acme.sh

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
General: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

acme.sh_project

Products

acme.sh

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

General

1100.0%

Referenced assets1 URL

By indicator

https://remyhax.xyz/posts/reproducing-lawful-tls-wiretapping/

Full discourse1 post

su8 / denchu@__su888137d
General
研究者xen0bitが2023年のjabber .ru盗聴事件からTLS傍受を技術検証。正規CA署名証明書での傍受は更新忘れで発覚し、acme .shのRCE(CVE-2023-38198)に着目。ACMEは堅牢でも証明書発行の実装ソフトが最弱点だと示す / Parallel Reconstruction of Lawful TLS Wiretapping https://remyhax.xyz/posts/reproducing-lawful-tls-wiretapping/
Post summary
The researcher confirms an RCE in ACME software (CVE-2023-38198) tied to a TLS interception case, noting that the vulnerability lies in the certificate issuance system, but does not share an exploit or patch.
0000099
792 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	acme.sh_project	acme.sh	-	-	-

Explore more

Back to dashboard acme.sh_project CVEs acme.sh vulnerabilities