CVE-2023-31983

critical · 9.8

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp function in /bin/webs without any limitations.

9.8

CVSS

24.9%

EPSS (exploit prob.)

98th

EPSS percentile

2023-05-12

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-77

Affected products

Vendor	Product	Affected versions
edimax	br-6428ns_firmware	1.10
edimax	br-6428ns	v4

Check a specific version with /api/v1/cve/match.

References

https://github.com/Erebua/CVE/blob/main/N300_BR-6428nS%20V4/2/Readme.md
https://github.com/Erebua/CVE/blob/main/N300_BR-6428nS%20V4/2/Readme.md

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-31983