CVE-2023-40072

OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a…

High · published August 18, 2023

CVSS v3.1
8.8
EPSS
2%
Percentile
79.6
In the wild
Unconfirmed
What it is

OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a specially crafted request.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01907 · 79.6th percentile
Published
2023-08-18T09:45Z
EPSS history
Timeline
  • 18 AUG 09:45Z
    OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute an arbitrary OS command by sending a…
    cvelistv5