CVE-2023-34849

An unauthorized command injection vulnerability exists in the ActionLogin function of the webman.lua file in Ikuai router OS through 3.7.1...

IKuai OS Command Injection Vulnerability

IKuai OS is an operating system from the Chinese company IKuai. It provides a powerful set of gateways, DPI-based traffic shaping, AC control, and portal authentication features that can increase capital efficiency by reducing initial installation costs. IKuai OS version 3.7.1 suffers from a...

CVE-2023-34849

An unauthorized command injection vulnerability exists in the ActionLogin function of the webman.lua file in Ikuai router OS through 3.7.1...

CVE-2023-34849

An unauthorized command injection vulnerability exists in the ActionLogin function of the webman.lua file in Ikuai router OS through 3.7.1...

CVE-2023-34849

An unauthorized command injection vulnerability exists in the ActionLogin function of the webman.lua file in Ikuai router OS through 3.7.1...

Command injection

An unauthorized command injection vulnerability exists in the ActionLogin function of the webman.lua file in Ikuai router OS through 3.7.1...

CVE-2023-34849

CVE-2023-34849 : Ikuai router OS up to version 3.7.1 contains an unauthorized command injection in the ActionLogin function of webman.lua, enabling arbitrary command execution with network access and no user interaction. Exploitation details are not provided in the connected docs; CVSSv3.1 is lis...

CVE-2023-34849

An unauthorized command injection vulnerability exists in the ActionLogin function of the webman.lua file in Ikuai router OS through 3.7.1...

CVE-2023-34849

An unauthorized command injection vulnerability exists in the ActionLogin function of the webman.lua file in Ikuai router OS through 3.7.1...

PT-2023-25031 · Ikuai · Ikuai Router Os

Name of the Vulnerable Software and Affected Versions: Ikuai router OS versions through 3.7.1 Description: An unauthorized command injection vulnerability exists in the ActionLogin function of the webman.lua file. This issue allows for command injection, potentially leading to unauthorized access...