Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-26602
HistoryFeb 26, 2023 - 8:15 p.m.

Command injection

2023-02-2620:15:00
PRIOn knowledge base
www.prio-n.com
5
asus
asmb8
ikvm
firmware
command injection
snmp
net-snmp-extend-mib
arbitrary code execution

9.9 High

AI Score

Confidence

High

0.041 Low

EPSS

Percentile

92.2%

ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create extensions, as demonstrated by snmpset for NET-SNMP-EXTEND-MIB with /bin/sh for command execution.

CPENameOperatorVersion
asmb8-ikvm_firmwarele1.14.51

9.9 High

AI Score

Confidence

High

0.041 Low

EPSS

Percentile

92.2%

Related for PRION:CVE-2023-26602