CVE-2023-39445

HighCVSS 8.8

Published: 18/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.50%

39th percentile - higher than 39% of all known CVEs

Summary

CVE-2023-39445 describes a hidden functionality vulnerability in LAN-WH300N/RE devices of all versions provided by LOGITEC CORPORATION, allowing an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console.

Risk Assessment

This vulnerability poses a significant risk to organizations as it allows attackers to remotely execute code, potentially leading to full control over the device.

Recommendation

It is recommended to update devices to the latest firmware version and implement appropriate security measures to mitigate the risk of exploitation.

Other vulnerabilities in LAN-WH300N/RE

CVE-2023-38576High
The CVE-2023-38576 vulnerability in LAN-WH300N/RE devices of all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arbitrary OS commands on a certain management console.

Original NVD description (English source)

Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticated attacker to execute arbitrary code by sending a specially crafted file to the product's certain management console.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS