CVE Vulnerability

CVE-2023-0861

NetModule NSRW web administration interface executes an OS command constructed with unsanitized user input. A successful exploit could allow an authenticated user to execute arbitrary commands with elevated privileges. This issue affects NSRW: from 4.3.0.0 before 4.3.0.119, from 4.4.0.0 before 4.4.0.118, from 4.6.0.0 before 4.6.0.105, from 4.7.0.0 before 4.7.0.103.

8.8 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://onekey.com/blog/security-advisory-netmodule-multiple-vulnerabilities Third Party Advisory
https://share.netmodule.com/public/system-software/4.7/4.7.0.103/NRSW-RN-4.7.0.103.pdf Release Notes
Configurations

Configuration 1

cpe:2.3:a:netmodule:netmodule_router_software:*:*:*:*:*:*:*:*
cpe:2.3:a:netmodule:netmodule_router_software:*:*:*:*:*:*:*:*
cpe:2.3:a:netmodule:netmodule_router_software:*:*:*:*:*:*:*:*
cpe:2.3:a:netmodule:netmodule_router_software:*:*:*:*:*:*:*:*
Information

Published : 2023-02-16 09:15

Updated : 2023-02-24 06:11

NVD link : CVE-2023-0861

Mitre link : CVE-2023-0861

Products Affected

Nb3701

Netmodule

CWE
No CWE.