CVE-2023-33617

HighCVSS 7.2

Published: 23/05/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

5.25%

91th percentile - higher than 91% of all known CVEs

Summary

An OS Command Injection vulnerability was found in Parks Fiberlink 210 firmware version V2.1.14_X000 via the target_addr parameter in /boaform/admin/formPing.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary system commands, potentially leading to device takeover.

Recommendation

It is recommended to update the firmware to the latest version to mitigate this vulnerability.

Original NVD description (English source)

An OS Command Injection vulnerability in Parks Fiberlink 210 firmware version V2.1.14_X000 was found via the /boaform/admin/formPing target_addr parameter.