CVE-2023-38829

2023-09-1100:00:00

mitre

github.com

netis systems

remote code execution

diagnostic tools

AI Score

7.9

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:h:netis-systems:wf2409e:-:*:*:*:*:*:*:*"
    ],
    "vendor": "netis-systems",
    "product": "wf2409e",
    "versions": [
      {
        "status": "affected",
        "version": "v.3.6.42541"
      }
    ],
    "defaultStatus": "unknown"
  }
]