H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2023-03-10
Last seen2023-03-10

Confidence

—

Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it.

Labels

exploitedkev

CISA KEV context

Vendor / productPlex Media Server
Added2023-03-10
Due date2023-03-31
2 recorded

Relationships

mitigatesMitigation
related-toTechnique
2 external

References

nvd
CVE-2020-5741
open
cwe
CWE-502
open