CVE-2023-34849

Name of the Vulnerable Software and Affected Versions Ikuai router OS versions through 3.7.1

Description An unauthorized command injection vulnerability exists in the ActionLogin function of the webman.lua file. This issue allows for command injection, potentially leading to unauthorized access or control.

Recommendations For Ikuai router OS versions through 3.7.1, as a temporary workaround, consider disabling the ActionLogin function until a patch is available. Restrict access to the webman.lua file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.