CVE-2023-30404

CriticalCVSS 9.8

Published: 26/04/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.21%

81th percentile - higher than 81% of all known CVEs

Summary

A remote code execution (RCE) vulnerability was discovered in the Aigital Wireless-N Repeater Mini_Router firmware version v0.131229 via the sysCmd parameter in the formSysCmd function. This flaw can be exploited by sending a crafted HTTP request.

Risk Assessment

The risk involves an unauthenticated attacker gaining remote control over the device, potentially compromising network confidentiality and integrity, and enabling further attacks on the infrastructure.

Recommendation

Immediately update the device firmware to the latest available version, or if no update is available, disable the device and replace it with a model that receives security updates.

Original NVD description (English source)

Aigital Wireless-N Repeater Mini_Router v0.131229 was discovered to contain a remote code execution (RCE) vulnerability via the sysCmd parameter in the formSysCmd function. This vulnerability is exploited via a crafted HTTP request.