Lucene search

MitreCVE-2023-30400

HistoryJun 07, 2023 - 1:15 a.m.

CVE-2023-30400

2023-06-0701:15:39

CWE-77

mitre

web.nvd.nist.gov

cve-2023-30400

anyka microelectronics

ak3918ev300

mcu

command injection

vulnerability

network configuration

arbitrary command execution

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.006

Percentile

79.5%

JSON

An issue was discovered in Anyka Microelectronics AK3918EV300 MCU v18. A command injection vulnerability in the network configuration script within the MCU’s operating system allows attackers to perform arbitrary command execution via a crafted wifi SSID or password.

Affected configurations

Nvd

Node

anykaak3918ev300Match-

AND

anykaak3918ev300_firmwareMatch18

VendorProductVersionCPE
anykaak3918ev300-cpe:2.3:h:anyka:ak3918ev300:-:*:*:*:*:*:*:*
anykaak3918ev300_firmware18cpe:2.3:o:anyka:ak3918ev300_firmware:18:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
anyka	ak3918ev300	-	cpe:2.3:h:anyka:ak3918ev300:-:::::::*
anyka	ak3918ev300_firmware	18	cpe:2.3:o:anyka:ak3918ev300_firmware:18:::::::*

References

arxiv.org/abs/2306.00610

github.com/Nemobi/ak3918ev300v18

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.006

Percentile

79.5%

JSON

Related for CVE-2023-30400