CVE-2023-47415

HighCVSS 7.5

Published: 07/03/2024(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

13.64%

96th percentile - higher than 96% of all known CVEs

Summary

Cypress Solutions CTM-200 version 2.7.1.5600 and below was found to have an OS command injection vulnerability via the cli_text parameter. An attacker can remotely execute arbitrary commands on the device.

Risk Assessment

The risk involves potential full device takeover by an unauthorized attacker, leading to compromise of data integrity and confidentiality, as well as network disruption.

Recommendation

Immediately update the CTM-200 firmware to a version newer than 2.7.1.5600 if available. Also restrict management interface access to trusted networks only.

Original NVD description (English source)

Cypress Solutions CTM-200 v2.7.1.5600 and below was discovered to contain an OS command injection vulnerability via the cli_text parameter.