CVE-2023-43893

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the wakeup_mac parameter in the Wake-On-LAN (WoL) function

published October 2, 2023

CVSS
—
EPSS
2%
Percentile
82.7
In the wild
Unconfirmed
What it is

⚠️ A single crafted payload could let an attacker execute commands on your Netis N3Mv2 router! 😱 Think of it like giving someone your remote control without realizing they could change the channel to anything they like — you thought you were just letting them watch TV, but they're tuning into chaos! 📺 If exploited, this command injection vulnerability could allow attackers to run arbitrary commands on your device, potentially leading to unauthorized access or management of your network. This is concerning because it opens the door to a range of malicious activities without your knowledge!

Put simply

Think of it like giving someone your remote control without realizing they could change the channel to anything they like — you thought you were just letting them watch TV, but they're tuning into chaos! 📺 The vulnerability stems from the wakeup_mac parameter in the Wake-On-LAN function, which doesn't properly validate input, allowing malicious commands to be injected and executed.

What to do

If exploited, this command injection vulnerability could allow attackers to run arbitrary commands on your device, potentially leading to unauthorized access or management of your network. This is concerning because it opens the door to a range of malicious activities without your knowledge! To protect your router, immediately update to the latest firmware version V1.0.1.865 if available. Additionally, consider restricting access to your router’s management interface to trusted devices only. Regularly check for firmware updates to stay ahead of any potential threats. You've got this! Stay vigilant and secure your network with these simple steps! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02244 · 82.7th percentile
Published
2023-10-02T00:00Z
EPSS history
Timeline
  • 02 OCT 00:00Z
    Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the wakeup_mac parameter in the Wake-On-LAN (WoL) function
    cvelistv5