Lucene search

MitreCVE-2023-33722

HistoryMay 31, 2023 - 7:15 p.m.

CVE-2023-33722

2023-05-3119:15:27

CWE-77

mitre

web.nvd.nist.gov

cve-2023-33722

edimax

br-6288acl

v1.12

authenticated

rce

vulnerability

pppusername

nvd

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

69.0%

JSON

EDIMAX BR-6288ACL v1.12 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the pppUserName parameter.

Affected configurations

Nvd

Node

edimaxbr-6288acl_firmwareMatch1.12

AND

edimaxbr-6288aclMatch-

VendorProductVersionCPE
edimaxbr-6288acl_firmware1.12cpe:2.3:o:edimax:br-6288acl_firmware:1.12:*:*:*:*:*:*:*
edimaxbr-6288acl-cpe:2.3:h:edimax:br-6288acl:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
edimax	br-6288acl_firmware	1.12	cpe:2.3:o:edimax:br-6288acl_firmware:1.12:::::::*
edimax	br-6288acl	-	cpe:2.3:h:edimax:br-6288acl:-:::::::*

References

docs.google.com/document/d/1KNuU0nVd4oHMZiKgfs45wK2yA4N6K7q4/edit?usp=sharing&ouid=108638774561085298954&rtpof=true&sd=true

shimo.im/docs/pmkxQ1GQ4DTowANr

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

69.0%

JSON

Related for CVE-2023-33722