Remote Code Execution Vulnerability in MitraStar GPT-2741GNAC-N2 Firmware
CVE-2023-30065

8.8HIGH

Key Information:

Vendor

Mitrastar

Status
Gpt-2741gnac-n2 Firmware
Vendor
CVE Published:
5 May 2023

What is CVE-2023-30065?

The MitraStar GPT-2741GNAC-N2 with firmware version BR_g5.9_1.11(WVK.0)b32 has a significant flaw in its ping function that allows for remote code execution. This vulnerability can potentially be exploited by an attacker to execute arbitrary commands on the device remotely, posing serious security risks. Users of this model are advised to update their firmware to protect against exploitation and ensure device integrity. Detailed analysis and mitigation strategies can be found in associated documentation.

References

https://github.com/Sigmw/mitrastar-code-execution/blob/ma...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.