CVE-2023-38864

An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the protaldeletepicname parameter in the sub41171C function at bin/webmgnt...

CVE-2023-38864

An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the protaldeletepicname parameter in the sub41171C function at bin/webmgnt...

CVE-2023-38864

CVE-2023-38864 affects COMFAST CF-XR11 firmware v2.7.2. A remote attacker can trigger arbitrary code execution via the protal_delete_picname parameter in bin/webmgnt (sub_41171C). CVSSv3.1: 9.8 (CRITICAL), Network vector, no privileges, no user interaction. Documents confirm the flaw but do not p...