PT-2023-29948 · Netmodule · Netmodule Router

Nuri Çilengir

·

CVE-2023-46306

·

Published

2023-10-22

·

Updated

2024-09-12

CVSS v3.1

8.4

High

VectorAV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions NetModule Router Software versions 4.6 through 4.6.0.105 NetModule Router Software versions 4.8 through 4.8.0.100
Description The web administration interface in NetModule Router Software executes an OS command, potentially leading to remote code execution.
Recommendations For NetModule Router Software versions 4.6 through 4.6.0.105, update to version 4.6.0.106 or later. For NetModule Router Software versions 4.8 through 4.8.0.100, update to version 4.8.0.101 or later.

Fix

OS Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2023-46306

Affected Products

Netmodule Router