CVE-2023-6304

🗓️ 27 Nov 2023 00:31:04Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 49 Views🌐 WEB

A critical os command injection vulnerability has been discovered in Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2023-6304	16 Dec 202317:18	–	circl
CNNVD	Tecno TR118 Security Vulnerability	27 Nov 202300:00	–	cnnvd
Cvelist	CVE-2023-6304 Tecno 4G Portable WiFi TR118 Ping Tool goform_get_cmd_process os command injection	27 Nov 202300:31	–	cvelist
EUVD	EUVD-2023-58546	3 Oct 202520:07	–	euvd
NVD	CVE-2023-6304	27 Nov 202301:15	–	nvd
Prion	Command injection	27 Nov 202301:15	–	prion
Positive Technologies	PT-2023-32604 · Tecno · Tecno 4G Portable Wifi Tr118	27 Nov 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-6304	23 May 202502:04	–	redhatcve

NVD

Node

tecno-mobile tr118_firmwareMatchtr118-m30e-rr-d-enfrarswhapo-op-v008-20220830

AND

tecno-mobile tr118Match-

[
  {
    "vendor": "Tecno",
    "product": "4G Portable WiFi TR118",
    "versions": [
      {
        "version": "TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830",
        "status": "affected"
      }
    ],
    "modules": [
      "Ping Tool"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
drive	www.drive.google.com/file/d/1DUSlAxTbNLBdv1aLUAn-tDMu6Z1rHYH8/view

Parameter	Position	Path	Description	CWE
url	query param	/goform/goform_get_cmd_process	OS command injection via manipulation of the url argument in /goform/goform_get_cmd_process	CWE-78

21 Nov 2024 08:43Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.2 - 8

CVSS 28.3

CVSS 37.2

EPSS0.0077

CWE-78

cve-2023-6304 tecno 4g portable wifi tr118 critical vulnerability os command injection remote attack vdb-246130 nvd ping tool