Back to Database
Status published
Unknown
CVE-2023-45239
A lack of input validation exists in tac_plus prior to...
Vulnerability Description
A lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr, or NAC address sent to tac_plus to inject shell commands and gain remote code execution on the tac_plus server.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-45239
Credits & Attribution
No credits recorded in the NVD database.
References
More from Meta
View All →CVE-2025-67779
It was found that the fix addressing CVE-2025-55184 in React...
High
7.5
CVE-2025-55184
A pre-authentication denial of service vulnerability exists in React Server...
High
7.5
CVE-2025-55183
An information leak vulnerability exists in specific configurations of React...
Medium
5.3
CVE-2025-55182
A pre-authentication remote code execution vulnerability exists in React Server...
Critical
10
CVE-2025-30259
The WhatsApp cloud service before late 2024 did not block...
Low
3.5
Affected Vendor
Meta
View all reports →Affected Software
tac_plus
Vulnerable Versions:
0
Timeline
Official Publish:
October 6th, 2023
Last Modified:
February 13th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.