CVE-2023-49593

High

Description

Leftover debug code exists in the boa formSysCmd functionality of LevelOne WBR-6013 RER4_A_v3411b_2T2R_LEV_09_170623. A specially crafted network request can lead to arbitrary command execution.

SeverityHigh
CVSS7.2
Exploit probability—
ProductLevel1 Wbr-6013 Firmware
PublishedJul 8, 2024
First seenJul 8, 2024
Weakness typeCWE-489CWE-489

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
level1 wbr-6013_firmwarerer4_a_v3411b_2t2r_lev_09_170623—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.