CVE-2023-46510

2023-10-2700:00:00

mitre

www.cve.org

zioncom

a7000r

arbitrary code execution

vulnerability

cybersecurity

9.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

JSON

An issue in ZIONCOM (Hong Kong) Technology Limited A7000R v.4.1cu.4154 allows an attacker to execute arbitrary code via the cig-bin/cstecgi.cgi to the settings/setPasswordCfg function.

References

gist.github.com/ATonysan/58ace23d539981441bca16ce0f7585e2