1 results (0.001 seconds)
CVSS: 9.8EPSS: 2%CPEs: 4EXPL: 1
CVSS: 9.8EPSS: 2%CPEs: 4EXPL: 1CVE-2023-31446
https://notcve.org/view.php?id=CVE-2023-31446
In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This leads to injecting Bash code and executing it with root privileges on device startup. En el firmware XC1000_2.1.1.2303082218 y XC2000_2.1.1.2303090947 de Cassia Gateway, el parámetro queueUrl en /bypass/config no está sanitizado. Esto lleva a inyectar código Bash y ejecutarlo con privilegios de root al iniciar el dispositivo. • https://github.com/Dodge-MPTC/CVE-2023-31446-Remote-Code-Execution https://blog.kscsc.online/cves/202331446/md.html https://www.cassianetworks.com •