CVE-2023-33377

CriticalCVSS 9.8

Published: 04/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.51%

71th percentile - higher than 71% of all known CVEs

Summary

Connected IO v2.1.0 and prior has an OS command injection vulnerability in the set firewall command, allowing attackers to execute arbitrary OS commands on devices.

Risk Assessment

This vulnerability could lead to device takeover, posing a significant security threat to organizational systems.

Recommendation

It is recommended to update to the latest version of Connected IO to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

Connected IO v2.1.0 and prior has an OS command injection vulnerability in the set firewall command in part of its communication protocol, enabling attackers to execute arbitrary OS commands on devices.