CVE-2023-27826

Опубликовано: 12 апр. 2023

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection. which allows attackers to take over the system with root privilege by abusing doSystem() function.

Ссылки

https://pastebin.com/raw/buhVV7iL
Exploit
Third Party Advisory
https://usermanual.wiki/SEOWON-INTECH/SWC5100W
Product
https://www.exploit-db.com/exploits/51311
Exploit
Third Party Advisory
VDB Entry
https://pastebin.com/raw/buhVV7iL
Exploit
Third Party Advisory
https://usermanual.wiki/SEOWON-INTECH/SWC5100W
Product
https://www.exploit-db.com/exploits/51311
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:seowonintech:swc-5100w_firmware:1.9.9.4:*:*:*:*:*:*:*

cpe:2.3:o:seowonintech:swc-5100w_firmware:1.11.0.1:*:*:*:*:*:*:*

cpe:2.3:h:seowonintech:swc-5100w:-:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.07272

Низкий

8.8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

GHSA-fg89-94jg-x86q