Lucene search

MitreCVE-2023-43890

HistoryOct 02, 2023 - 8:15 p.m.

CVE-2023-43890

2023-10-0220:15:10

CWE-78

mitre

web.nvd.nist.gov

netis

n3mv2

v1.0.1.865

command injection

diagnostic tools

http request

vulnerability

cve-2023-43890

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

35.2%

JSON

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the diagnostic tools page. This vulnerability is exploited via a crafted HTTP request.

Affected configurations

Nvd

Node

netis-systemsn3mMatch2.0

AND

netis-systemsn3m_firmwareMatch1.0.1.865

VendorProductVersionCPE
netis-systemsn3m2.0cpe:2.3:h:netis-systems:n3m:2.0:*:*:*:*:*:*:*
netis-systemsn3m_firmware1.0.1.865cpe:2.3:o:netis-systems:n3m_firmware:1.0.1.865:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netis-systems	n3m	2.0	cpe:2.3:h:netis-systems:n3m:2.0:::::::*
netis-systems	n3m_firmware	1.0.1.865	cpe:2.3:o:netis-systems:n3m_firmware:1.0.1.865:::::::*

References

github.com/adhikara13/CVE/blob/main/netis_N3/command%20injection%20bypass%20filter.md

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

35.2%

JSON

Related for CVE-2023-43890