CVE-2023-0862

Katalog CVE

CVSS 8.8 · High EPSS 2,4%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada netmodule router software. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

The NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file uploads and deletion. By uploading malicious files to the web root directory, authenticated users could gain remote command execution with elevated privileges. This issue affects NSRW: from 4.3.0.0 before 4.3.0.119, from 4.4.0.0 before 4.4.0.118, from 4.6.0.0 before 4.6.0.105, from 4.7.0.0 before 4.7.0.103.

Rincian

Terbit di NVD

16 Februari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

2,4% peluang dieksploitasi; lebih tinggi dari 83,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://share.netmodule.com/public/system-software/4.7/4.7.0.103/NRSW-RN-4.7.0.103.pdf release notes · advisory vendor
• https://onekey.com/blog/security-advisory-netmodule-multiple-vulnerabilities/ advisory pihak ketiga