PT-2023-29032 · Netis · Netis N3Mv2

Adhikara13

·

CVE-2023-43893

·

Published

2023-10-02

·

Updated

2024-10-05

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Netis N3Mv2 version 1.0.1.865
Description A command injection issue was discovered in the Wake-On-LAN (WoL) function via the wakeup mac parameter. This issue can be exploited using a crafted payload.
Recommendations For Netis N3Mv2 version 1.0.1.865, consider disabling the Wake-On-LAN (WoL) function until a patch is available to prevent exploitation via the wakeup mac parameter.

Exploit

Fix

OS Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2023-43893

Affected Products

Netis N3Mv2