CVE-2023-37794

CriticalCVSS 9.8

Published: 14/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.07%

79th percentile - higher than 79% of all known CVEs

The WAYOS FBM-291W version 19.09.11V was found to contain a command injection vulnerability via the component /upgrade_filter.asp.

Exploitation of this vulnerability could lead to unauthorized command execution on the device, posing a serious security threat.

It is recommended to update the device to the latest software version to mitigate this vulnerability.

Original NVD description (English source)

WAYOS FBM-291W 19.09.11V was discovered to contain a command injection vulnerability via the component /upgrade_filter.asp.