Netmodule Router Software
Approved changes feed: RSS · Atom
cpe:2.3:a:netmodule:netmodule_router_software:4.8:*:*:*:*:*:*:*
part: a version: 4.8 update: *
| Vendor | Netmodule (b67e51e9-b6fc-5a0d-8e3a-6444efc29430) |
|---|---|
| Product | Netmodule Router Software (c764e7ed-7df3-54af-827d-5d6bd81db99b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-46306 |
vulnerable | 2026-06-03 14:53:09.579809 |
Details available
HIGH (8.4)
The web administration interface in NetModule Router Software (NRSW) 4.6 before 4.6.0.106 and 4.8 before 4.8.0.101 executes an OS command constructed with unsanitized user input: shell metacharacters in the /admin/gnssAutoAlign.php device_id parameter. This occurs because another thread can be started before the trap that triggers the cleanup function. A successful exploit could allow an authenticated user to execute arbitrary commands with elevated privileges. NOTE: this is different from CVE-2023-0861 and CVE-2023-0862, which were fixed in version 4.6.0.105.
Published: 2023-10-22T00:00:00.000Z
Updated: 2024-09-12T18:22:55.873Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.