4 matches found
CVE-2023-33377
Connected IO v2.1.0 and prior has an OS command injection vulnerability in the set firewall command in part of its communication protocol, enabling attackers to execute arbitrary OS commands on devices...
CVE-2023-33377
Connected IO v2.1.0 and prior has an OS command injection vulnerability in the set firewall command in part of its communication protocol, enabling attackers to execute arbitrary OS commands on devices...
PT-2023-5847
Name of the Vulnerable Software and Affected Versions Connected IO versions 2.1.0 and prior Description The issue is related to the implementation of the communication protocol in the firmware of Connected IO routers, which is vulnerable to OS command injection. This allows a remote attacker to...
CVE-2023-33377: Improper Neutralization of Special Elements used in an OS Command
Connected IO v2.1.0 and prior has an OS command injection vulnerability in the set firewall command in part of its communication protocol, enabling attackers to execute arbitrary OS commands on devices...