CVE-2023-37242
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
Vulnerability in the atcmdserver module allows interception of commands from the modem. Attackers may exploit this vulnerability to rewrite NVRAM or facilitate the exploitation of other vulnerabilities.
Risk Assessment
The risk to the organization involves the potential modification of critical data in NVRAM, which could lead to further attacks or system compromise.
Recommendation
It is recommended to update the software and monitor and secure communication with the modem to minimize the risk of exploiting this vulnerability.
Original NVD description (English source)
Vulnerability of commands from the modem being intercepted in the atcmdserver module. Attackers may exploit this vulnerability to rewrite the non-volatile random-access memory (NVRAM), or facilitate the exploitation of other vulnerabilities.