CVE-2023-43891

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the Changing Username and Password function. This vulnerability is exploited via a crafted payload.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-10-02

Last modified

2024-09-20

Weaknesses

CWE-77

Affected products

• N3m Firmware (Netis-systems)

References

• https://github.com/adhikara13/CVE/blob/main/netis_N3/command%20injection%20in%20changing%20password%20feature.md