CVE-2023-38862

CriticalCVSS 9.8

Published: 15/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.08%

61th percentile - higher than 61% of all known CVEs

Summary

Version 2.7.2 of the COMFAST CF-XR11 device contains a vulnerability that allows an attacker to execute arbitrary code via the destination parameter of the sub_431F64 function in the bin/webmgnt file.

Risk Assessment

This vulnerability could lead to the compromise of the device, posing a serious threat to the organization's network security.

Recommendation

It is recommended to update the device to the latest firmware version to mitigate this vulnerability.

Original NVD description (English source)

An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the destination parameter of sub_431F64 function in bin/webmgnt.