CVE-2023-33375

概要

参考情報

• claroty.com/team82/disclosure-dashboard/cve-2023-33375 · Third Party Advisory
• connectedio.com/products/routers · Product

connected io のその他の脆弱性

• CVE-2023-33378緊急 9.8Connected IO v2.1.0 and prior has an argument injection vulnerability in its AT command message in its communication protocol, enabling atta…
• CVE-2023-33377緊急 9.8Connected IO v2.1.0 and prior has an OS command injection vulnerability in the set firewall command in part of its communication protocol, e…
• CVE-2023-33376緊急 9.8Connected IO v2.1.0 and prior has an argument injection vulnerability in its iptables command message in its communication protocol, enablin…
• CVE-2023-33374緊急 9.8Connected IO v2.1.0 and prior has a command as part of its communication protocol allowing the management platform to specify arbitrary OS c…
• CVE-2023-33373緊急 9.8Connected IO v2.1.0 and prior keeps passwords and credentials in clear-text format, allowing attackers to exfiltrate the credentials and use…