Lucene search

K
cveMitreCVE-2023-47462
HistoryNov 29, 2023 - 5:15 a.m.

CVE-2023-47462

2023-11-2905:15:08
CWE-276
mitre
web.nvd.nist.gov
16
cve-2023-47462
insecure permissions
gl.inet ax1800
remote code execution
file sharing
vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.003

Percentile

68.1%

Insecure Permissions vulnerability in GL.iNet AX1800 v.3.215 and before allows a remote attacker to execute arbitrary code via the file sharing function.

Affected configurations

Nvd
Node
gl-inetgl-ax1800_firmwareRange3.125
AND
gl-inetgl-ax1800Match-
VendorProductVersionCPE
gl-inetgl-ax1800_firmware*cpe:2.3:o:gl-inet:gl-ax1800_firmware:*:*:*:*:*:*:*:*
gl-inetgl-ax1800-cpe:2.3:h:gl-inet:gl-ax1800:-:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.003

Percentile

68.1%

Related for CVE-2023-47462