EXPOSURES › CVE-2023-39809

CVE-2023-39809

CRITICAL

DETAIL

SourceNVD · cve Published2023-08-21 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-39809 ↗

⚡ RCE SHAME 50/100 rce

N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain an OS command injection vulnerability via shell metacharacters in the system_hostname parameter at /manage/network-basic.php.

▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.

PLAYERS IMPLICATED

nvki · vendor intelligent broadband subscriber gateway · product

DESCRIPTION

N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain an OS command injection vulnerability via shell metacharacters in the system_hostname parameter at /manage/network-basic.php.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.