CVE-2023-41921

Published: Jul 2, 2024Modified: Jun 17, 2026Deferred

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: cert@ncsc.nl (Secondary)

Description

A vulnerability allows attackers to download source code or an executable from a remote location and execute the code without sufficiently verifying the origin and integrity of the code. This vulnerability can allow attackers to modify the firmware before uploading it to the system, thus achieving the modification of the target’s integrity to achieve an insecure state.

Related CWEs

CWE-494

Download of Code Without Integrity Check

The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

References (2)

https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273

Source: cert@ncsc.nl

https://advisories.ncsc.nl/advisory?id=NCSC-2024-0273

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.