CVE-2023-26609

🗓️ 27 Feb 2023 00:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 96 Views🌐 WEB

ABUS TVIP 20000-21150 RCE via /cgi-bin/mft/wireless_mft ap fiel

Reporter	Title	Published	Views	Family All 14
0day.today	ABUS Security Camera TVIP 20000-21150 LFI / Remote Code Execution Vulnerability	27 Feb 202300:00	–	zdt
GithubExploit	Exploit for CVE-2023-26609	16 Jan 202415:02	–	githubexploit
Circl	CVE-2023-26609	27 Feb 202307:36	–	circl
CNNVD	ABUS TVIP 安全漏洞	27 Feb 202300:00	–	cnnvd
Cvelist	CVE-2023-26609	27 Feb 202300:00	–	cvelist
Exploit DB	ABUS Security Camera TVIP 20000-21150 - LFI, RCE and SSH Root Access	6 Apr 202300:00	–	exploitdb
ICS	ABUS TVIP	6 Jul 202306:00	–	ics
NVD	CVE-2023-26609	27 Feb 202302:16	–	nvd
Packet Storm	ABUS Security Camera TVIP 20000-21150 LFI / Remote Code Execution	27 Feb 202300:00	–	packetstorm
Prion	Code injection	27 Feb 202302:16	–	prion

NVD

Node

abus tvip_20000-21150_firmwareMatch-

AND

abus tvip_20000-21150Match-

Source	Link
nwsec	www.nwsec.de/NWSSA-001-2023.txt
packetstormsecurity	www.packetstormsecurity.com/files/171136/ABUS-Security-Camera-TVIP-20000-21150-LFI-Remote-Code-Execution.html
seclists	www.seclists.org/fulldisclosure/2023/Feb/16

Parameter	Position	Path	Description	CWE
READ.filePath	query param	cgi-bin/admin/fileread	LFI via fileread to read arbitrary files on the device	CWE-22, CWE-200
ap	query param	cgi-bin/mft/wireless_mft	Command injection via wireless_mft to execute arbitrary commands	CWE-77, CWE-78

05 May 2025 16:15Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.2

EPSS0.36775

SSVC

In Wild

abus tvip 20000-21150 rce remote code execution cgi metacharacters