CVE-2023-27826

high · 8.8

SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection. which allows attackers to take over the system with root privilege by abusing doSystem() function.

8.8

CVSS

11.8%

EPSS (exploit prob.)

96th

EPSS percentile

2023-04-12

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-78

Affected products

Vendor	Product	Affected versions
seowonintech	swc-5100w_firmware	1.9.9.4
seowonintech	swc-5100w_firmware	1.11.0.1
seowonintech	swc-5100w	all versions

Check a specific version with /api/v1/cve/match.

References

https://pastebin.com/raw/buhVV7iL
https://usermanual.wiki/SEOWON-INTECH/SWC5100W
https://www.exploit-db.com/exploits/51311
https://pastebin.com/raw/buhVV7iL
https://usermanual.wiki/SEOWON-INTECH/SWC5100W
https://www.exploit-db.com/exploits/51311

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-27826