CVE-2023-30400

2023-06-0700:00:00

mitre

www.cve.org

cve-2023-30400

network configuration script

arbitrary command execution

wifi ssid

password

AI Score

9.7

Confidence

High

EPSS

0.006

Percentile

79.5%

JSON

An issue was discovered in Anyka Microelectronics AK3918EV300 MCU v18. A command injection vulnerability in the network configuration script within the MCU’s operating system allows attackers to perform arbitrary command execution via a crafted wifi SSID or password.

References

arxiv.org/abs/2306.00610

github.com/Nemobi/ak3918ev300v18