CVE-2023-34216
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
The TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to a command-injection vulnerability. This vulnerability arises from insufficient input validation in the key-delete function, potentially allowing malicious users to delete arbitrary files.
Risk Assessment
This threat could lead to unauthorized deletion of important files, impacting system integrity and data availability within the organization.
Recommendation
It is recommended to update the firmware to the latest version to mitigate this vulnerability and implement additional security measures against unauthorized access.
Other vulnerabilities in TN-4900 Series firmware v1.2.4 and prior, TN-5900 Series firmware v3.3 and prior
See all- CVE-2023-33239High
The TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to command injection. This vulnerability arises from insufficient input validation in the key-generation function, potentially allowing malicious users to execute remote code on affected devices.
- CVE-2023-33238High
The TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to command injection. This vulnerability arises from inadequate input validation in the certificate management function, potentially allowing malicious users to execute remote code on affected devices.
Original NVD description (English source)
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability derives from insufficient input validation in the key-delete function, which could potentially allow malicious users to delete arbitrary files.