CVE Catalog
CVE-2023-49900
CriticalCVSS 9.8Summary
An unauthenticated remote attacker can execute remote code due to improper sanitization of user input in the SetParameter command.
Risk Assessment
An attacker can take control of the system without authentication, leading to full compromise of data confidentiality, integrity, and availability.
Recommendation
Immediately update the software to a patched version and implement input validation and sanitization for all user input in the SetParameter command.
Original NVD description (English source)
An unauthenticated remote attacker is able to perform remote code execution due to incorrectly sanitized user input in the SetParameter command.