CVE-2023-3608CWE-78

Ruijie BCR810W Tracert Page os command injection

Medium · published July 10, 2023

CVSS v3.1

4.7

EPSS

12%

Percentile

96.2

In the wild

Unconfirmed

What it is

A vulnerability was found in Ruijie BCR810W 2.5.10. It has been rated as critical. This issue affects some unknown processing of the component Tracert Page. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-233477 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

The record

Technical detail

CVSS v3.1: 4.7 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0: Not supplied
EPSS: 0.12292 · 96.2th percentile
Weakness: CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published: 2023-07-10T21:31Z

EPSS history

Timeline

10 JUL 21:31Z
Ruijie BCR810W Tracert Page os command injection
cvelistv5