CVE-2023-49593

Leftover debug code exists in the boa formSysCmd functionality of LevelOne WBR-6013 RER4_A_v3411b_2T2R_LEV_09_170623. A specially crafted network request can lead to arbitrary command execution.

Score

CVSS 3.1 7.2 High

Status

Modified - talos-cna@cisco.com

Published

2024-07-08

Last modified

2025-11-04

Weaknesses

CWE-489

Affected products

• Wbr-6013 Firmware (Level1)
• Wbr6013 (Level One)
• Wbr-6013 (Levelone)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1873
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1873