CVE-2023-33239
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk62th percentile - higher than 62% of all known CVEs
Summary
The TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to command injection. This vulnerability arises from insufficient input validation in the key-generation function, potentially allowing malicious users to execute remote code on affected devices.
Risk Assessment
This threat could lead to unauthorized access to systems and potential data loss or control over devices within the organization's network.
Recommendation
It is recommended to update the firmware to the latest version to mitigate this vulnerability and implement additional security measures to protect against injection attacks.
Other vulnerabilities in TN-4900 Series firmware v1.2.4 and prior, TN-5900 Series firmware v3.3 and prior
See all- CVE-2023-34216High
The TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to a command-injection vulnerability. This vulnerability arises from insufficient input validation in the key-delete function, potentially allowing malicious users to delete arbitrary files.
- CVE-2023-33238High
The TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to command injection. This vulnerability arises from inadequate input validation in the certificate management function, potentially allowing malicious users to execute remote code on affected devices.
Original NVD description (English source)
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from insufficient input validation in the key-generation function, which could potentially allow malicious users to execute remote code on affected devices.