CVE-2023-43321

2023-10-0400:00:00

mitre

github.com

digital china networks

file upload

arbitrary code

authenticated

wget

cloudadmin.

AI Score

7.8

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

File Upload vulnerability in Digital China Networks DCFW-1800-SDC v.3.0 allows an authenticated attacker to execute arbitrary code via the wget function in the /sbin/cloudadmin.sh component.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:dcnetworks:dcfw-1800-sdc_firmware:3.0:*:*:*:*:*:*:*"
    ],
    "vendor": "dcnetworks",
    "product": "dcfw-1800-sdc_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "3.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]