CVE-2023-33381
HighCVSS 7.2Exploitation Probability (EPSS)
Very high risk97th percentile - higher than 97% of all known CVEs
Summary
A command injection vulnerability was found in the ping functionality of the MitraStar GPT-2741GNAC router (firmware AR_g5.8_110WVN0b7_2). It allows an authenticated user to execute arbitrary OS commands via specially crafted input.
Risk Assessment
An attacker can gain full control over the router, compromising network confidentiality, integrity, and availability, and potentially using the device for further attacks.
Recommendation
Immediately update the router firmware to the latest version and restrict administrative access to trusted users only.
Original NVD description (English source)
A command injection vulnerability was found in the ping functionality of the MitraStar GPT-2741GNAC router (firmware version AR_g5.8_110WVN0b7_2). The vulnerability allows an authenticated user to execute arbitrary OS commands by sending specially crafted input to the router via the ping function.