CVE-2023-45465

2023-10-1313:15:12

CWE-77

[email protected]

web.nvd.nist.gov

netis n3mv2-v1.0.1.865

command injection

dynamic dns settings

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.013

Percentile

86.2%

JSON

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in the Dynamic DNS settings.

Affected configurations

Nvd

Node

netis-systemsn3m_firmwareMatch1.0.1.865

AND

netis-systemsn3mMatchv2

VendorProductVersionCPE
netis-systemsn3m_firmware1.0.1.865cpe:2.3:o:netis-systems:n3m_firmware:1.0.1.865:*:*:*:*:*:*:*
netis-systemsn3mv2cpe:2.3:h:netis-systems:n3m:v2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netis-systems	n3m_firmware	1.0.1.865	cpe:2.3:o:netis-systems:n3m_firmware:1.0.1.865:::::::*
netis-systems	n3m	v2	cpe:2.3:h:netis-systems:n3m:v2:::::::*