CVE-2023-43478

fakeupload.cgi on the Telstra Smart Modem Gen 2 Arcadyan LH1000, firmware versions 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code execution ...

CVE-2023-43478 Unauthenticated configuration restore and firmware update

fakeupload.cgi on the Telstra Smart Modem Gen 2 Arcadyan LH1000, firmware versions 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code execution ...

CVE-2023-43478

The CVE-2023-43478 entry concerns Telstra Smart Modem Gen 2 (Arcadyan LH1000) with firmware versions prior to 0.18.15r. The vulnerability stems from the fake_upload.cgi endpoint, which allows unauthenticated uploads of firmware images and configuration backups, potentially enabling an attacker to...