Approved changes feed: RSS · Atom

cpe:2.3:a:meta:tac_plus:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMeta (669c0e49-deac-551a-899c-1a7ac356f994)
ProductTac Plus (76318854-bcf0-581f-8bee-d0a5d13e5b2d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-45239 vulnerable 2026-06-08 06:12:42.385255 Details available
A lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr, or NAC address sent to tac_plus to inject shell commands and gain remote code execution on the tac_plus server.
Published: 2023-10-06T17:16:16.797Z
Updated: 2025-02-13T17:13:58.340Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.