Vulnerability Description
Wi-Fi AP UNIT AC-PD-WAPU v1.05_B04 and earlier, AC-PD-WAPUM v1.05_B04 and earlier, AC-PD-WAPU-P v1.05_B04P and earlier, AC-PD-WAPUM-P v1.05_B04P and earlier, AC-WAPU-300 v1.00_B07 and earlier, AC-WAPU-300-P v1.00_B08P and earlier, AC-WAPUM-300 v1.00_B07 and earlier, and AC-WAPUM-300-P v1.00_B08P and earlier allow an authenticated user with an administrative privilege to execute an arbitrary OS command.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Inaba | Ac-Wapu-300 Firmware | <= 1.00_b07 |
| Inaba | Ac-Wapu-300 | - |
| Inaba | Ac-Wapu-300-P Firmware | <= 1.00_b08p |
| Inaba | Ac-Wapu-300-P | - |
| Inaba | Ac-Wapum-300 Firmware | <= 1.00_b07 |
| Inaba | Ac-Wapum-300 | - |
| Inaba | Ac-Wapum-300-P Firmware | <= 1.00_b08p |
| Inaba | Ac-Wapum-300-P | - |
Related Weaknesses (CWE)
References
- https://jvn.jp/en/jp/JVN28412757/
- https://jvn.jp/en/vu/JVNVU98968780/Third Party Advisory
- https://www.inaba.co.jp/abaniact/news/Wi-Fi%20AP%20UNIT%E3%80%8CAC-WAPU-300%E3%8Vendor Advisory
- https://jvn.jp/en/jp/JVN28412757/
- https://jvn.jp/en/vu/JVNVU98968780/Third Party Advisory
- https://www.inaba.co.jp/abaniact/news/Wi-Fi%20AP%20UNIT%E3%80%8CAC-WAPU-300%E3%8Vendor Advisory
FAQ
What is CVE-2023-28392?
CVE-2023-28392 is a vulnerability with a CVSS score of 7.2 (HIGH). Wi-Fi AP UNIT AC-PD-WAPU v1.05_B04 and earlier, AC-PD-WAPUM v1.05_B04 and earlier, AC-PD-WAPU-P v1.05_B04P and earlier, AC-PD-WAPUM-P v1.05_B04P and earlier, AC-WAPU-300 v1.00_B07 and earlier, AC-WAPU...
How severe is CVE-2023-28392?
CVE-2023-28392 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-28392?
Check the references section above for vendor advisories and patch information. Affected products include: Inaba Ac-Wapu-300 Firmware, Inaba Ac-Wapu-300, Inaba Ac-Wapu-300-P Firmware, Inaba Ac-Wapu-300-P, Inaba Ac-Wapum-300 Firmware.