CVE-2023-45466

2023-10-1313:15:12

CWE-77

[email protected]

web.nvd.nist.gov

netis n3mv2-v1.0.1.865

command injection

wps settings

vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.013

Percentile

86.2%

JSON

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pin_host parameter in the WPS Settings.

Affected configurations

Nvd

Node

netis-systemsn3mv2_firmwareMatch1.0.1.865

AND

netis-systemsn3mMatchv2

VendorProductVersionCPE
netis-systemsn3mv2_firmware1.0.1.865cpe:2.3:o:netis-systems:n3mv2_firmware:1.0.1.865:*:*:*:*:*:*:*
netis-systemsn3mv2cpe:2.3:h:netis-systems:n3m:v2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netis-systems	n3mv2_firmware	1.0.1.865	cpe:2.3:o:netis-systems:n3mv2_firmware:1.0.1.865:::::::*
netis-systems	n3m	v2	cpe:2.3:h:netis-systems:n3m:v2:::::::*