CVE-2023-3608 - Ruijie BCR810W Tracert Page os command injection

Back Back to CVE browser

HIGH

Ruijie BCR810W Tracert Page os command injection

Published Jul 10, 2023

8.8

HIGH

CVSS 3.1

EPSS 12.29%

Description

A vulnerability was found in Ruijie BCR810W 2.5.10. It has been rated as critical. This issue affects some unknown processing of the component Tracert Page. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-233477 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor Ruijie Product BCR810W Default
n/a
- Version
  2.5.10
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Ruijie

BCR810W

n/a

Version	Status	Constraints
2.5.10	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-44257
Advisory
https://github.com/cq535454518/cve/blob/main/RG-BCR810W.md
exploitThird Party Advisory
https://vuldb.com/?ctiid.233477
signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.233477
vdb-entrytechnical-descriptionThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-44257		Advisory
https://github.com/cq535454518/cve/blob/main/RG-BCR810W.md		exploitThird Party Advisory
https://vuldb.com/?ctiid.233477		signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.233477		vdb-entrytechnical-descriptionThird Party Advisory