CVE Catalog
CVE-2023-49899
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.21%
11th percentile - higher than 11% of all known CVEs
Summary
An unauthenticated remote attacker can execute any command on the affected device due to not correctly verifying the origin of a communication channel.
Risk Assessment
The risk is that an attacker can fully compromise the device without authentication, potentially leading to loss of confidentiality, integrity, and availability.
Recommendation
Immediately update the software to a version that correctly verifies the origin of the communication channel and implement authentication mechanisms for all remote connections.
Original NVD description (English source)
An unauthenticated remote attacker can execute any command on the affected device due to not correctly verifying the origin of a communication channel.