CVE-2023-38829

2023-09-1100:00:00

mitre

www.cve.org

cve-2023-38829

remote attacker

arbitrary code execution

diagnostic tools

admin management interface

AI Score

9.1

Confidence

High

EPSS

0.002

Percentile

61.1%

JSON

An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools component in the admin management interface.

References

github.com/adhikara13/CVE-2023-38829-NETIS-WF2409E