CVE-2023-38576

HighCVSS 8.0

Published: 18/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

Summary

The CVE-2023-38576 vulnerability in LAN-WH300N/RE devices of all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console.

Risk Assessment

This vulnerability could lead to unauthorized access to the operating system, posing a serious threat to the security of organizational data and infrastructure.

Recommendation

It is recommended to update devices to the latest software version and restrict access to the management console to trusted users.

Other vulnerabilities in LAN-WH300N/RE

CVE-2023-39445High
CVE-2023-39445 describes a hidden functionality vulnerability in LAN-WH300N/RE devices of all versions provided by LOGITEC CORPORATION, allowing an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console.

Original NVD description (English source)

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS