Lucene search

[email protected]CVE-2023-27826

HistoryApr 12, 2023 - 1:15 p.m.

CVE-2023-27826

2023-04-1213:15:07

CWE-78

[email protected]

web.nvd.nist.gov

cve-2023-27826

seowonintech

swc 5100w

wimax

bootloader

os command injection

nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.6%

JSON

SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection. which allows attackers to take over the system with root privilege by abusing doSystem() function.

Affected configurations

NVD

Node

seowonintechswc-5100w_firmwareMatch1.9.9.4

seowonintechswc-5100w_firmwareMatch1.11.0.1

AND

seowonintechswc-5100wMatch-

CPENameOperatorVersion
seowonintech:swc-5100w_firmwareseowonintech swc-5100w firmwareeq1.9.9.4
seowonintech:swc-5100w_firmwareseowonintech swc-5100w firmwareeq1.11.0.1

CPE	Name	Operator	Version
seowonintech:swc-5100w_firmware	seowonintech swc-5100w firmware	eq	1.9.9.4
seowonintech:swc-5100w_firmware	seowonintech swc-5100w firmware	eq	1.11.0.1

References

pastebin.com/raw/buhVV7iL

usermanual.wiki/SEOWON-INTECH/SWC5100W

www.exploit-db.com/exploits/51311

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.6%

JSON

Related for CVE-2023-27826

cvelist1 nvd1 prion1