CVE Catalog

CVE-2023-37058

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.63%

46th percentile - higher than 46% of all known CVEs

Summary

An insecure permissions vulnerability in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to escalate privileges via a crafted command. The flaw is due to improperly configured access permissions.

Risk Assessment

An attacker can gain unauthorized elevated access to the system, potentially leading to full compromise of the device and network.

Recommendation

Immediately update the Jlink AX1800 firmware to the latest version provided by the vendor and restrict management interface access to trusted networks only.

Original NVD description (English source)

Insecure Permissions vulnerability in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to escalate privileges via a crafted command.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS