CVE-2023-37058 — CRITICAL (9.8)

Vulnerability Description

Insecure Permissions vulnerability in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to escalate privileges via a crafted command.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Unionman	Jlink Ax1800 Firmware	1.0
Unionman	Jlink Ax1800	All versions

Related Weaknesses (CWE)

CWE-269

References

http://jlink.comNot Applicable
https://github.com/ri5c/Jlink-Router-RCEExploitThird Party Advisory
http://jlink.comNot Applicable
https://github.com/ri5c/Jlink-Router-RCEExploitThird Party Advisory

FAQ

What is CVE-2023-37058?

CVE-2023-37058 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Insecure Permissions vulnerability in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to escalate privileges via a crafted command.

How severe is CVE-2023-37058?

CVE-2023-37058 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2023-37058?

Check the references section above for vendor advisories and patch information. Affected products include: Unionman Jlink Ax1800 Firmware, Unionman Jlink Ax1800.