CVE-2023-22304

2023-01-1700:00:00

jpcert

www.cve.org

command injection

pix-rt100

network-adjacent attacker

product settings

0.0004 Low

EPSS

Percentile

9.6%

JSON

OS command injection vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101 allows a network-adjacent attacker who can access product settings to execute an arbitrary OS command.

CNA Affected

[
  {
    "vendor": "PIXELA CORPORATION",
    "product": "PIX-RT100",
    "versions": [
      {
        "version": "versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN57296685/index.html

www.pixela.co.jp/products/network/pix_rt100/update.html

0.0004 Low

EPSS

Percentile

9.6%

JSON

Related for CVELIST:CVE-2023-22304