CVE-2023-46306

creationtimestamp| type| source ---|---|--- 2023-10-23 00:39:04+00:00| seen| https://t.me/cibsecurity/72746...

CVE-2023-46306

NetModule Router Software (NRSW) versions affected: 4.6.x before 4.6.0.106 and 4.8.x before 4.8.0.101. The web admin interface constructs OS commands from unsanitized input in /admin/gnssAutoAlign.php device_id, due to a race/cleanup timing issue enabling execution of arbitrary commands with elev...