CVE-2023-28390

2023-05-2300:00:00

jpcert

www.cve.org

cve-2023-28390

privilege escalation

sr-7100vn

AI Score

7.1

Confidence

High

EPSS

Percentile

9.0%

JSON

Privilege escalation vulnerability in SR-7100VN firmware Ver.1.38(N) and earlier and SR-7100VN #31 firmware Ver.1.21 and earlier allows a network-adjacent attacker with administrative privilege of the affected product to obtain an administrative privilege of the OS (Operating System). As a result, an arbitrary OS command may be executed.

CNA Affected

[
  {
    "vendor": "ICOM INCORPORATED",
    "product": "SR-7100VN",
    "versions": [
      {
        "version": "SR-7100VN firmware Ver.1.38(N) and earlier, and SR-7100VN #31 firmware Ver.1.21 and earlier",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN80476232/

www.icom.co.jp/news/7239/