Threat Investigation
Request a demo

CVE-2023-1082

High

Description

An remote attacker with low privileges can perform a command injection which can lead to root access.

SeverityHigh
CVSS8.8
Exploit probability—
ProductTK515L
PublishedApr 9, 2024
First seenApr 9, 2024
Weakness typeCWE-78OS command injection

How to fix

Update
  • Welotec TK515Lv2.3.0.r5542 or later
  • Welotec TK515L Setv2.3.0.r5542 or later
  • Welotec TK515L-Wv2.3.0.r5542 or later
  • Welotec TK515L-W Setv2.3.0.r5542 or later
  • Welotec TK525Lv2.3.0.r5542 or later
  • Welotec TK525L Setv2.3.0.r5542 or later
  • Welotec TK525L-Wv2.3.0.r5542 or later
  • Welotec TK525L-W Setv2.3.0.r5542 or later
  • Welotec TK525Uv2.3.0.r5542 or later
  • Welotec TK525U Setv2.3.0.r5542 or later
  • Welotec TK525Wv2.3.0.r5542 or later
  • Welotec TK525W Setv2.3.0.r5542 or later

Affected products

ProductAffected versionsFixed in
Welotec TK515Lv < v2.3.0.r5542v2.3.0.r5542
Welotec TK515L Setv < v2.3.0.r5542v2.3.0.r5542
Welotec TK515L-Wv < v2.3.0.r5542v2.3.0.r5542
Welotec TK515L-W Setv < v2.3.0.r5542v2.3.0.r5542
Welotec TK525Lv < v2.3.0.r5542v2.3.0.r5542
Welotec TK525L Setv < v2.3.0.r5542v2.3.0.r5542
Welotec TK525L-Wv < v2.3.0.r5542v2.3.0.r5542
Welotec TK525L-W Setv < v2.3.0.r5542v2.3.0.r5542
Welotec TK525Uv < v2.3.0.r5542v2.3.0.r5542
Welotec TK525U Setv < v2.3.0.r5542v2.3.0.r5542
Welotec TK525Wv < v2.3.0.r5542v2.3.0.r5542
Welotec TK525W Setv < v2.3.0.r5542v2.3.0.r5542
Welotec TK535L1v < v2.3.0.r5542v2.3.0.r5542
Welotec TK535L1 Setv < v2.3.0.r5542v2.3.0.r5542

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.