CVE-2023-38863

Name of the Vulnerable Software and Affected Versions COMFAST CF-XR11 version 2.7.2

Description An issue in the software allows an attacker to execute arbitrary code via the ifname and mac parameters in the sub 410074 function at bin/webmgnt.

Recommendations For COMFAST CF-XR11 version 2.7.2, consider disabling the sub 410074 function as a temporary workaround until a patch is available. Restrict access to the bin/webmgnt module to minimize the risk of exploitation. Avoid using the ifname and mac parameters in the affected function until the issue is resolved.