CVE-2023-0432

🗓️ 31 Mar 2023 15:51:02Reported by icscertType

The web config service of the device has authenticated command injection vulnerability, enabling OS command execution as user "root.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-0432	31 Mar 202320:22	–	circl
CNNVD	Delta Electronics DX-2100 Series 跨站脚本漏洞	3 Feb 202300:00	–	cnnvd
Cvelist	CVE-2023-0432 CVE-2023-0432	31 Mar 202315:51	–	cvelist
EUVD	EUVD-2023-12489	3 Oct 202520:07	–	euvd
ICS	Delta Electronics DX-2100-L1-CN	2 Feb 202300:00	–	ics
NVD	CVE-2023-0432	31 Mar 202316:15	–	nvd
Prion	Command injection	31 Mar 202316:15	–	prion
Positive Technologies	PT-2023-1546 · Delta Electronics · Dx-2100-L1-Cn	2 Feb 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-0432	23 May 202504:39	–	redhatcve
Vulnrichment	CVE-2023-0432 CVE-2023-0432	31 Mar 202315:51	–	vulnrichment

NVD

Vulners

Node

deltaww dx-2100l1-cn_firmwareRange<1.5.0.12

AND

deltaww dx-2100l1-cnMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "DX-2100-L1-CN",
    "vendor": "Delta Electronics",
    "versions": [
      {
        "status": "affected",
        "version": "1.5.0.10"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-033-05

17 Jan 2025 18:15Current

9.5High risk

Vulners AI Score9.5

CVSS 3.19

EPSS0.01761

SSVC

CWE-79