Lucene search
PRIOn knowledge basePRION:CVE-2023-38902HistoryAug 17, 2023 - 1:15 p.m.
Command injection
2023-08-1713:15:00
PRIOn knowledge base
www.prio-n.com
11
vulnerability
command injection
remote execution
authorized attacker
post request
specific device series
A command injection vulnerability in RG-EW series home routers and repeaters v.EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches v.SWITCH_3.0(1)B11P219, RG-EG series business VPN routers v.EG_3.0(1)B11P219, EAP and RAP series wireless access points v.AP_3.0(1)B11P219, and NBC series wireless controllers v.AC_3.0(1)B11P219 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /cgi-bin/luci/api/cmd via the remoteIp field.
Related
cvelist
cvelist
CVE-2023-38902
2023-08-17 00:00:00
nvd
nvd
CVE-2023-38902
2023-08-17 13:15:11
cve
cve
CVE-2023-38902
2023-08-17 13:15:11