Lucene search

JpcertCVE-2023-31198

HistoryJun 13, 2023 - 10:15 a.m.

CVE-2023-31198

2023-06-1310:15:10

CWE-78

jpcert

web.nvd.nist.gov

cve-2023-31198

wi-fi

unit

os command injection

vulnerability

nvd

security

exploit

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

0.002

Percentile

58.8%

JSON

OS command injection vulnerability exists in Wi-Fi AP UNIT allows. If this vulnerability is exploited, a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command. Affected products and versions are as follows: AC-PD-WAPU v1.05_B04 and earlier, AC-PD-WAPUM v1.05_B04 and earlier, AC-PD-WAPU-P v1.05_B04P and earlier, AC-PD-WAPUM-P v1.05_B04P and earlier, AC-WAPU-300 v1.00_B07 and earlier, AC-WAPUM-300 v1.00_B07 and earlier, AC-WAPU-300-P v1.00_B07 and earlier, and AC-WAPUM-300-P v1.00_B07 and earlier

Affected configurations

Nvd

Vulners

Node

inabaac-pd-wapu_firmwareRange≤1.05_b04

AND

inabaac-pd-wapuMatch-

Node

inabaac-pd-wapum_firmwareRange≤1.05_b04

AND

inabaac-pd-wapumMatch-

Node

inabaac-pd-wapu-p_firmwareRange≤1.05_b04p

AND

inabaac-pd-wapu-pMatch-

Node

inabaac-pd-wapum-p_firmwareRange≤1.05_b04p

AND

inabaac-pd-wapum-pMatch-

Node

inabaac-wapu-300_firmwareRange≤1.00_b07

AND

inabaac-wapu-300Match-

Node

inabaac-wapum-300_firmwareRange≤1.00_b07

AND

inabaac-wapum-300Match-

Node

inabaac-wapum-300-p_firmwareRange≤1.00_b07

AND

inabaac-wapum-300-pMatch-

Node

inabaac-wapu-300-p_firmwareRange≤1.00_b07

AND

inabaac-wapu-300-pMatch-

VendorProductVersionCPE
inabaac-pd-wapu_firmware*cpe:2.3:o:inaba:ac-pd-wapu_firmware:*:*:*:*:*:*:*:*
inabaac-pd-wapu-cpe:2.3:h:inaba:ac-pd-wapu:-:*:*:*:*:*:*:*
inabaac-pd-wapum_firmware*cpe:2.3:o:inaba:ac-pd-wapum_firmware:*:*:*:*:*:*:*:*
inabaac-pd-wapum-cpe:2.3:h:inaba:ac-pd-wapum:-:*:*:*:*:*:*:*
inabaac-pd-wapu-p_firmware*cpe:2.3:o:inaba:ac-pd-wapu-p_firmware:*:*:*:*:*:*:*:*
inabaac-pd-wapu-p-cpe:2.3:h:inaba:ac-pd-wapu-p:-:*:*:*:*:*:*:*
inabaac-pd-wapum-p_firmware*cpe:2.3:o:inaba:ac-pd-wapum-p_firmware:*:*:*:*:*:*:*:*
inabaac-pd-wapum-p-cpe:2.3:h:inaba:ac-pd-wapum-p:-:*:*:*:*:*:*:*
inabaac-wapu-300_firmware*cpe:2.3:o:inaba:ac-wapu-300_firmware:*:*:*:*:*:*:*:*
inabaac-wapu-300-cpe:2.3:h:inaba:ac-wapu-300:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
inaba	ac-pd-wapu_firmware	*	cpe:2.3:o:inaba:ac-pd-wapu_firmware::::::::
inaba	ac-pd-wapu	-	cpe:2.3:h:inaba:ac-pd-wapu:-:::::::*
inaba	ac-pd-wapum_firmware	*	cpe:2.3:o:inaba:ac-pd-wapum_firmware::::::::
inaba	ac-pd-wapum	-	cpe:2.3:h:inaba:ac-pd-wapum:-:::::::*
inaba	ac-pd-wapu-p_firmware	*	cpe:2.3:o:inaba:ac-pd-wapu-p_firmware::::::::
inaba	ac-pd-wapu-p	-	cpe:2.3:h:inaba:ac-pd-wapu-p:-:::::::*
inaba	ac-pd-wapum-p_firmware	*	cpe:2.3:o:inaba:ac-pd-wapum-p_firmware::::::::
inaba	ac-pd-wapum-p	-	cpe:2.3:h:inaba:ac-pd-wapum-p:-:::::::*
inaba	ac-wapu-300_firmware	*	cpe:2.3:o:inaba:ac-wapu-300_firmware::::::::
inaba	ac-wapu-300	-	cpe:2.3:h:inaba:ac-wapu-300:-:::::::*

Rows per page:

1-10 of 161

CNA Affected

[
  {
    "vendor": "Inaba Denki Sangyo Co., Ltd.",
    "product": "Wi-Fi AP UNIT",
    "versions": [
      {
        "version": "AC-PD-WAPU v1.05_B04 and earlier, AC-PD-WAPUM v1.05_B04 and earlier, AC-PD-WAPU-P v1.05_B04P and earlier, AC-PD-WAPUM-P v1.05_B04P and earlier, AC-WAPU-300 v1.00_B07 and earlier, AC-WAPUM-300 v1.00_B07 and earlier, AC-WAPU-300-P v1.00_B07 and earlier, and AC-WAPUM-300-P v1.00_B07 and earlier",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN28412757/

www.inaba.co.jp/abaniact/news/Wi-Fi_AP_UNIT%E3%81%AB%E3%81%8A%E3%81%91%E3%82%8B%E8%A4%87%E6%95%B0%E3%81%AE%E8%84%86%E5%BC%B1%E6%80%A7%E3%81%AB%E3%81%A4%E3%81%84%E3%81%A6.pdf

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

0.002

Percentile

58.8%

JSON

Related for CVE-2023-31198