CVE Catalog
CVE-2023-34849
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk2.55%
83th percentile - higher than 83% of all known CVEs
Summary
An unauthorized command injection vulnerability exists in the ActionLogin function of the webman.lua file in Ikuai router OS through version 3.7.1.
Risk Assessment
An attacker could exploit this vulnerability to execute unauthorized commands on the router, potentially leading to device takeover.
Recommendation
It is recommended to update the Ikuai router OS to the latest version to mitigate this vulnerability.
Original NVD description (English source)
An unauthorized command injection vulnerability exists in the ActionLogin function of the webman.lua file in Ikuai router OS through 3.7.1.