CVE-2023-0862
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD
Description
The NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file uploads and deletion. By uploading malicious files to the web root directory, authenticated users could gain remote command execution with elevated privileges.
This issue affects NSRW: from 4.3.0.0 before 4.3.0.119, from 4.4.0.0 before 4.4.0.118, from 4.6.0.0 before 4.6.0.105, from 4.7.0.0 before 4.7.0.103.
Affected (4)
Products: Netmodule: Netmodule Router Software
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 4.3.0.0 to 4.3.0.119 |
| Running on/with | Platform Versions |
|---|---|
Netmodule Nb1601 | All versions |
Netmodule Nb1800 | All versions |
Netmodule Nb1810 | All versions |
Netmodule Nb2800 | All versions |
Netmodule Nb2810 | All versions |
Netmodule Nb3701 | All versions |
Netmodule Nb3800 | All versions |
Netmodule Nb800 | All versions |
Netmodule Ng800 | All versions |
References (4)
Source: research@onekey.com
Third Party Advisory
Source: research@onekey.com
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Timeline
No history available yet.