CVE-2023-41012

Опубликовано: 05 сент. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

An issue in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the authentication mechanism.

Ссылки

https://github.com/te5tb99/For-submitting/wiki/Command-Execution-Vulnerability-in-China-Mobile-Intelligent-Home-Gateway-HG6543C4-Identity-verification-has-design-flaws
Exploit
Third Party Advisory
https://github.com/te5tb99/For-submitting/wiki/Command-Execution-Vulnerability-in-China-Mobile-Intelligent-Home-Gateway-HG6543C4-Identity-verification-has-design-flaws
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:chinamobile:intelligent_home_gateway_firmware:hg6543c4:*:*:*:*:*:*:*

cpe:2.3:h:chinamobile:intelligent_home_gateway:-:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05524

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-384

Связанные уязвимости

GHSA-4c8q-5q86-gvj9