CVE-2023-27826

SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection. which allows attackers to take over the system with root privilege by abusing doSystem() function.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://pastebin.com/raw/buhVV7iL	Exploit Third Party Advisory
https://usermanual.wiki/SEOWON-INTECH/SWC5100W	Product
https://www.exploit-db.com/exploits/51311	Exploit Third Party Advisory VDB Entry
https://pastebin.com/raw/buhVV7iL	Exploit Third Party Advisory
https://usermanual.wiki/SEOWON-INTECH/SWC5100W	Product
https://www.exploit-db.com/exploits/51311	Exploit Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:seowonintech:swc-5100w_firmware:1.9.9.4:::::::*
	cpe:2.3:o:seowonintech:swc-5100w_firmware:1.11.0.1:::::::*

cpe:2.3:h:seowonintech:swc-5100w:-:*:*:*:*:*:*:*

History

21 Nov 2024, 07:53

Type	Values Removed	Values Added
References	~~() https://pastebin.com/raw/buhVV7iL - Exploit, Third Party Advisory~~	() https://pastebin.com/raw/buhVV7iL - Exploit, Third Party Advisory
References	~~() https://usermanual.wiki/SEOWON-INTECH/SWC5100W - Product~~	() https://usermanual.wiki/SEOWON-INTECH/SWC5100W - Product
References	~~() https://www.exploit-db.com/exploits/51311 - Exploit, Third Party Advisory, VDB Entry~~	() https://www.exploit-db.com/exploits/51311 - Exploit, Third Party Advisory, VDB Entry

Information

Published : 2023-04-12 13:15

Updated : 2024-11-21 07:53

NVD link : CVE-2023-27826

Mitre link : CVE-2023-27826

CVE.ORG link : CVE-2023-27826

JSON object : View

Products Affected

seowonintech

swc-5100w_firmware
swc-5100w

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2023-27826", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2023-04-12T13:15:07.573", "references": [{"url": "https://pastebin.com/raw/buhVV7iL", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://usermanual.wiki/SEOWON-INTECH/SWC5100W", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/51311", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://pastebin.com/raw/buhVV7iL", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://usermanual.wiki/SEOWON-INTECH/SWC5100W", "tags": ["Product"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/51311", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection. which allows attackers to take over the system with root privilege by abusing doSystem() function."}], "lastModified": "2024-11-21T07:53:32.610", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:seowonintech:swc-5100w_firmware:1.9.9.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A87515A7-7BC2-40C9-ABC7-AFBD140D78AA"}, {"criteria": "cpe:2.3:o:seowonintech:swc-5100w_firmware:1.11.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E2D3D17-8900-4C3E-9A22-AD0E1564A4B4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:seowonintech:swc-5100w:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "07996E93-A808-4A07-8C3D-5734B3D971ED"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}