CVE-2023-38865

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub4143F0. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter timestr...

CVE-2023-38865

CVE-2023-38865 affects COMFAST CF-XR11 v2.7.2. The vulnerability is a command-injection in function sub_4143F0, allowing an attacker to send POST requests to /usr/bin/webmgnt and inject commands via the timestr parameter. Connected sources confirm the affected product and vulnerable component; no...