CVE-2023-33238CWE-78

Command-injection Vulnerability in Certificate Management

High · published August 17, 2023

CVSS v3.1
7.2
EPSS
1%
Percentile
56.9
In the wild
Unconfirmed
What it is

TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from inadequate input validation in the certificate management function, which could potentially allow malicious users to execute remote code on affected devices.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00823 · 56.9th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2023-08-17T02:04Z
EPSS history
Timeline
  • 17 AUG 02:04Z
    Command-injection Vulnerability in Certificate Management
    cvelistv5