CVE-2023-23325

CriticalCVSS 9.8

Published: 29/11/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.74%

75th percentile - higher than 75% of all known CVEs

Summary

A command injection vulnerability was discovered in Zumtobel Netlink CCD Onboard firmware versions 3.74-3.80 via the NetHostname parameter. An attacker can remotely execute arbitrary system commands.

Risk Assessment

The risk involves potential unauthorized control over the device, leading to compromise of the lighting system's integrity and confidentiality.

Recommendation

Immediately update the firmware to the latest version and restrict management interface access to trusted networks only.

Original NVD description (English source)

Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain a command injection vulnerability via the NetHostname parameter.