CVE-2023-33238
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
The TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to command injection. This vulnerability arises from inadequate input validation in the certificate management function, potentially allowing malicious users to execute remote code on affected devices.
Risk Assessment
This threat could lead to the takeover of devices, posing a serious risk to the organization's network security and its data.
Recommendation
It is recommended to update the firmware to the latest version to mitigate this vulnerability and implement additional security measures to protect against potential attacks.
Other vulnerabilities in TN-4900 Series firmware v1.2.4 and prior, TN-5900 Series firmware v3.3 and prior
See all- CVE-2023-34216High
The TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to a command-injection vulnerability. This vulnerability arises from insufficient input validation in the key-delete function, potentially allowing malicious users to delete arbitrary files.
- CVE-2023-33239High
The TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to command injection. This vulnerability arises from insufficient input validation in the key-generation function, potentially allowing malicious users to execute remote code on affected devices.
Original NVD description (English source)
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from inadequate input validation in the certificate management function, which could potentially allow malicious users to execute remote code on affected devices.