Lucene search
PRIOn knowledge basePRION:CVE-2023-35193HistoryOct 11, 2023 - 4:15 p.m.
Command injection
2023-10-1116:15:00
PRIOn knowledge base
www.prio-n.com
6
os command injection
api vulnerability
peplink surf soho hw1
firmware 6.3.5
An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.This vulnerability is specifically for the system call in the file /web/MANGA/cgi-bin/api.cgi for firmware version 6.3.5 at offset 0x4bddb8.
| CPE | Name | Operator | Version |
|---|---|---|---|
| surf_soho_firmware | eq | 6.3.5 |
Related
nvd
nvd
CVE-2023-35193
2023-10-11 16:15:13
cve
cve
CVE-2023-35193
2023-10-11 16:15:13
cvelist
cvelist
CVE-2023-35193
2023-10-11 15:16:55
talos
talos
talosblog
talosblog