Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
2 vulnerabilities by netmodule
VAR-202302-1451
Vulnerability from variot - Updated: 2023-12-18 13:31The NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file uploads and deletion. By uploading malicious files to the web root directory, authenticated users could gain remote command execution with elevated privileges.
This issue affects NSRW: from 4.3.0.0 before 4.3.0.119, from 4.4.0.0 before 4.4.0.118, from 4.6.0.0 before 4.6.0.105, from 4.7.0.0 before 4.7.0.103. NetModule of netmodule router software Exists in a past traversal vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. The issue affects NSRW packaged by Phoenix Contact routers: from 4.6.72.0 prior to 4.6.72.101, from 4.6.73.0 prior to 4.6.73.101
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202302-1451",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "router software",
"scope": "gte",
"trust": 1.0,
"vendor": "netmodule",
"version": "4.6.0.0"
},
{
"model": "router software",
"scope": "lt",
"trust": 1.0,
"vendor": "netmodule",
"version": "4.6.0.105"
},
{
"model": "router software",
"scope": "lt",
"trust": 1.0,
"vendor": "netmodule",
"version": "4.4.0.118"
},
{
"model": "router software",
"scope": "gte",
"trust": 1.0,
"vendor": "netmodule",
"version": "4.3.0.0"
},
{
"model": "router software",
"scope": "lt",
"trust": 1.0,
"vendor": "netmodule",
"version": "4.3.0.119"
},
{
"model": "router software",
"scope": "gte",
"trust": 1.0,
"vendor": "netmodule",
"version": "4.7.0.0"
},
{
"model": "router software",
"scope": "gte",
"trust": 1.0,
"vendor": "netmodule",
"version": "4.4.0.0"
},
{
"model": "router software",
"scope": "lt",
"trust": 1.0,
"vendor": "netmodule",
"version": "4.7.0.103"
},
{
"model": "router software",
"scope": "eq",
"trust": 0.8,
"vendor": "netmodule",
"version": "4.7.0.0 that\u0027s all 4.7.0.103"
},
{
"model": "router software",
"scope": "eq",
"trust": 0.8,
"vendor": "netmodule",
"version": "4.6.0.0 that\u0027s all 4.6.0.105"
},
{
"model": "router software",
"scope": "eq",
"trust": 0.8,
"vendor": "netmodule",
"version": "4.3.0.0 that\u0027s all 4.3.0.119"
},
{
"model": "router software",
"scope": "eq",
"trust": 0.8,
"vendor": "netmodule",
"version": null
},
{
"model": "router software",
"scope": "eq",
"trust": 0.8,
"vendor": "netmodule",
"version": "4.4.0.0 that\u0027s all 4.4.0.118"
},
{
"model": "router software",
"scope": null,
"trust": 0.8,
"vendor": "netmodule",
"version": null
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2023-004138"
},
{
"db": "NVD",
"id": "CVE-2023-0862"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:netmodule:netmodule_router_software:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "4.3.0.119",
"versionStartIncluding": "4.3.0.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netmodule:netmodule_router_software:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "4.4.0.118",
"versionStartIncluding": "4.4.0.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netmodule:netmodule_router_software:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "4.6.0.105",
"versionStartIncluding": "4.6.0.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netmodule:netmodule_router_software:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "4.7.0.103",
"versionStartIncluding": "4.7.0.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:netmodule:nb1601:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:netmodule:nb1800:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:netmodule:nb1810:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:netmodule:nb2800:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:netmodule:nb2810:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:netmodule:nb3701:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:netmodule:nb3800:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:netmodule:nb800:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:netmodule:ng800:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2023-0862"
}
]
},
"cve": "CVE-2023-0862",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "NVD",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "research@onekey.com",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 1.2,
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 8.8,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2023-0862",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "Low",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2023-0862",
"trust": 1.8,
"value": "HIGH"
},
{
"author": "research@onekey.com",
"id": "CVE-2023-0862",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-202302-1352",
"trust": 0.6,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2023-004138"
},
{
"db": "NVD",
"id": "CVE-2023-0862"
},
{
"db": "NVD",
"id": "CVE-2023-0862"
},
{
"db": "CNNVD",
"id": "CNNVD-202302-1352"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file uploads and deletion. By uploading malicious files to the web root directory, authenticated users could gain remote command execution with elevated privileges. \n\nThis issue affects NSRW: from 4.3.0.0 before 4.3.0.119, from 4.4.0.0 before 4.4.0.118, from 4.6.0.0 before 4.6.0.105, from 4.7.0.0 before 4.7.0.103. NetModule of netmodule router software Exists in a past traversal vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. The issue affects NSRW packaged by Phoenix Contact routers: from 4.6.72.0 prior to 4.6.72.101, from 4.6.73.0 prior to 4.6.73.101",
"sources": [
{
"db": "NVD",
"id": "CVE-2023-0862"
},
{
"db": "JVNDB",
"id": "JVNDB-2023-004138"
},
{
"db": "VULHUB",
"id": "VHN-454974"
},
{
"db": "VULMON",
"id": "CVE-2023-0862"
}
],
"trust": 1.8
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2023-0862",
"trust": 3.4
},
{
"db": "JVNDB",
"id": "JVNDB-2023-004138",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-202302-1352",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-454974",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2023-0862",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-454974"
},
{
"db": "VULMON",
"id": "CVE-2023-0862"
},
{
"db": "JVNDB",
"id": "JVNDB-2023-004138"
},
{
"db": "NVD",
"id": "CVE-2023-0862"
},
{
"db": "CNNVD",
"id": "CNNVD-202302-1352"
}
]
},
"id": "VAR-202302-1451",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-454974"
}
],
"trust": 0.01
},
"last_update_date": "2023-12-18T13:31:40.266000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "NetModule NSRW Repair measures for path traversal vulnerabilities",
"trust": 0.6,
"url": "http://123.124.177.30/web/xxk/bdxqbyid.tag?id=226775"
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/live-hack-cve/cve-2023-0862 "
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2023-0862"
},
{
"db": "CNNVD",
"id": "CNNVD-202302-1352"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-22",
"trust": 1.1
},
{
"problemtype": "Path traversal (CWE-22) [NVD evaluation ]",
"trust": 0.8
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-454974"
},
{
"db": "JVNDB",
"id": "JVNDB-2023-004138"
},
{
"db": "NVD",
"id": "CVE-2023-0862"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.6,
"url": "https://onekey.com/blog/security-advisory-netmodule-multiple-vulnerabilities/"
},
{
"trust": 2.6,
"url": "https://share.netmodule.com/public/system-software/4.7/4.7.0.103/nrsw-rn-4.7.0.103.pdf"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2023-0862"
},
{
"trust": 0.6,
"url": "https://cxsecurity.com/cveshow/cve-2023-0862/"
},
{
"trust": 0.1,
"url": "https://github.com/live-hack-cve/cve-2023-0862"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-454974"
},
{
"db": "VULMON",
"id": "CVE-2023-0862"
},
{
"db": "JVNDB",
"id": "JVNDB-2023-004138"
},
{
"db": "NVD",
"id": "CVE-2023-0862"
},
{
"db": "CNNVD",
"id": "CNNVD-202302-1352"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-454974"
},
{
"db": "VULMON",
"id": "CVE-2023-0862"
},
{
"db": "JVNDB",
"id": "JVNDB-2023-004138"
},
{
"db": "NVD",
"id": "CVE-2023-0862"
},
{
"db": "CNNVD",
"id": "CNNVD-202302-1352"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2023-02-16T00:00:00",
"db": "VULHUB",
"id": "VHN-454974"
},
{
"date": "2023-02-16T00:00:00",
"db": "VULMON",
"id": "CVE-2023-0862"
},
{
"date": "2023-10-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2023-004138"
},
{
"date": "2023-02-16T10:15:11.983000",
"db": "NVD",
"id": "CVE-2023-0862"
},
{
"date": "2023-02-16T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202302-1352"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2023-02-24T00:00:00",
"db": "VULHUB",
"id": "VHN-454974"
},
{
"date": "2023-02-16T00:00:00",
"db": "VULMON",
"id": "CVE-2023-0862"
},
{
"date": "2023-10-26T03:55:00",
"db": "JVNDB",
"id": "JVNDB-2023-004138"
},
{
"date": "2023-11-07T04:01:44.163000",
"db": "NVD",
"id": "CVE-2023-0862"
},
{
"date": "2023-02-27T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202302-1352"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202302-1352"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "NetModule\u00a0 of \u00a0netmodule\u00a0router\u00a0software\u00a0 Past traversal vulnerability in",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2023-004138"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "path traversal",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202302-1352"
}
],
"trust": 0.6
}
}
VAR-202302-1450
Vulnerability from variot - Updated: 2023-12-18 12:54NetModule NSRW web administration interface executes an OS command constructed with unsanitized user input. A successful exploit could allow an authenticated user to execute arbitrary commands with elevated privileges. This issue affects NSRW: from 4.3.0.0 before 4.3.0.119, from 4.4.0.0 before 4.4.0.118, from 4.6.0.0 before 4.6.0.105, from 4.7.0.0 before 4.7.0.103. NetModule of netmodule router software for, OS A command injection vulnerability exists.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. The issue affects NSRW packaged by Phoenix Contact routers: from 4.6.72.0 prior to 4.6.72.101, from 4.6.73.0 prior to 4.6.73.101
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202302-1450",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "router software",
"scope": "gte",
"trust": 1.0,
"vendor": "netmodule",
"version": "4.6.0.0"
},
{
"model": "router software",
"scope": "lt",
"trust": 1.0,
"vendor": "netmodule",
"version": "4.6.0.105"
},
{
"model": "router software",
"scope": "lt",
"trust": 1.0,
"vendor": "netmodule",
"version": "4.4.0.118"
},
{
"model": "router software",
"scope": "gte",
"trust": 1.0,
"vendor": "netmodule",
"version": "4.3.0.0"
},
{
"model": "router software",
"scope": "lt",
"trust": 1.0,
"vendor": "netmodule",
"version": "4.3.0.119"
},
{
"model": "router software",
"scope": "gte",
"trust": 1.0,
"vendor": "netmodule",
"version": "4.7.0.0"
},
{
"model": "router software",
"scope": "gte",
"trust": 1.0,
"vendor": "netmodule",
"version": "4.4.0.0"
},
{
"model": "router software",
"scope": "lt",
"trust": 1.0,
"vendor": "netmodule",
"version": "4.7.0.103"
},
{
"model": "router software",
"scope": "eq",
"trust": 0.8,
"vendor": "netmodule",
"version": "4.7.0.0 that\u0027s all 4.7.0.103"
},
{
"model": "router software",
"scope": "eq",
"trust": 0.8,
"vendor": "netmodule",
"version": "4.6.0.0 that\u0027s all 4.6.0.105"
},
{
"model": "router software",
"scope": "eq",
"trust": 0.8,
"vendor": "netmodule",
"version": "4.3.0.0 that\u0027s all 4.3.0.119"
},
{
"model": "router software",
"scope": "eq",
"trust": 0.8,
"vendor": "netmodule",
"version": null
},
{
"model": "router software",
"scope": "eq",
"trust": 0.8,
"vendor": "netmodule",
"version": "4.4.0.0 that\u0027s all 4.4.0.118"
},
{
"model": "router software",
"scope": null,
"trust": 0.8,
"vendor": "netmodule",
"version": null
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2023-004140"
},
{
"db": "NVD",
"id": "CVE-2023-0861"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:netmodule:netmodule_router_software:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "4.3.0.119",
"versionStartIncluding": "4.3.0.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netmodule:netmodule_router_software:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "4.4.0.118",
"versionStartIncluding": "4.4.0.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netmodule:netmodule_router_software:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "4.6.0.105",
"versionStartIncluding": "4.6.0.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netmodule:netmodule_router_software:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "4.7.0.103",
"versionStartIncluding": "4.7.0.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:netmodule:nb1601:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:netmodule:nb1800:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:netmodule:nb1810:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:netmodule:nb2800:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:netmodule:nb2810:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:netmodule:nb3701:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:netmodule:nb3800:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:netmodule:nb800:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:netmodule:ng800:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2023-0861"
}
]
},
"cve": "CVE-2023-0861",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "NVD",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "research@onekey.com",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 1.2,
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 8.8,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2023-0861",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "Low",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2023-0861",
"trust": 1.8,
"value": "HIGH"
},
{
"author": "research@onekey.com",
"id": "CVE-2023-0861",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-202302-1355",
"trust": 0.6,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2023-004140"
},
{
"db": "NVD",
"id": "CVE-2023-0861"
},
{
"db": "NVD",
"id": "CVE-2023-0861"
},
{
"db": "CNNVD",
"id": "CNNVD-202302-1355"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "NetModule NSRW web administration interface executes an OS command constructed with unsanitized user input. \u00a0A successful exploit could allow an authenticated user to execute arbitrary commands with elevated privileges. \nThis issue affects NSRW: from 4.3.0.0 before 4.3.0.119, from 4.4.0.0 before 4.4.0.118, from 4.6.0.0 before 4.6.0.105, from 4.7.0.0 before 4.7.0.103. NetModule of netmodule router software for, OS A command injection vulnerability exists.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. The issue affects NSRW packaged by Phoenix Contact routers: from 4.6.72.0 prior to 4.6.72.101, from 4.6.73.0 prior to 4.6.73.101",
"sources": [
{
"db": "NVD",
"id": "CVE-2023-0861"
},
{
"db": "JVNDB",
"id": "JVNDB-2023-004140"
},
{
"db": "VULHUB",
"id": "VHN-454973"
},
{
"db": "VULMON",
"id": "CVE-2023-0861"
}
],
"trust": 1.8
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2023-0861",
"trust": 3.4
},
{
"db": "JVNDB",
"id": "JVNDB-2023-004140",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-202302-1355",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-454973",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2023-0861",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-454973"
},
{
"db": "VULMON",
"id": "CVE-2023-0861"
},
{
"db": "JVNDB",
"id": "JVNDB-2023-004140"
},
{
"db": "NVD",
"id": "CVE-2023-0861"
},
{
"db": "CNNVD",
"id": "CNNVD-202302-1355"
}
]
},
"id": "VAR-202302-1450",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-454973"
}
],
"trust": 0.01
},
"last_update_date": "2023-12-18T12:54:30.806000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "NetModule NSRW Fixes for operating system command injection vulnerabilities",
"trust": 0.6,
"url": "http://123.124.177.30/web/xxk/bdxqbyid.tag?id=226778"
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/live-hack-cve/cve-2023-0861 "
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2023-0861"
},
{
"db": "CNNVD",
"id": "CNNVD-202302-1355"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-78",
"trust": 1.1
},
{
"problemtype": "OS Command injection (CWE-78) [NVD evaluation ]",
"trust": 0.8
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-454973"
},
{
"db": "JVNDB",
"id": "JVNDB-2023-004140"
},
{
"db": "NVD",
"id": "CVE-2023-0861"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.6,
"url": "https://onekey.com/blog/security-advisory-netmodule-multiple-vulnerabilities"
},
{
"trust": 2.6,
"url": "https://share.netmodule.com/public/system-software/4.7/4.7.0.103/nrsw-rn-4.7.0.103.pdf"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2023-0861"
},
{
"trust": 0.6,
"url": "https://cxsecurity.com/cveshow/cve-2023-0861/"
},
{
"trust": 0.1,
"url": "https://github.com/live-hack-cve/cve-2023-0861"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-454973"
},
{
"db": "VULMON",
"id": "CVE-2023-0861"
},
{
"db": "JVNDB",
"id": "JVNDB-2023-004140"
},
{
"db": "NVD",
"id": "CVE-2023-0861"
},
{
"db": "CNNVD",
"id": "CNNVD-202302-1355"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-454973"
},
{
"db": "VULMON",
"id": "CVE-2023-0861"
},
{
"db": "JVNDB",
"id": "JVNDB-2023-004140"
},
{
"db": "NVD",
"id": "CVE-2023-0861"
},
{
"db": "CNNVD",
"id": "CNNVD-202302-1355"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2023-02-16T00:00:00",
"db": "VULHUB",
"id": "VHN-454973"
},
{
"date": "2023-02-16T00:00:00",
"db": "VULMON",
"id": "CVE-2023-0861"
},
{
"date": "2023-10-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2023-004140"
},
{
"date": "2023-02-16T09:15:10.237000",
"db": "NVD",
"id": "CVE-2023-0861"
},
{
"date": "2023-02-16T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202302-1355"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2023-02-24T00:00:00",
"db": "VULHUB",
"id": "VHN-454973"
},
{
"date": "2023-02-16T00:00:00",
"db": "VULMON",
"id": "CVE-2023-0861"
},
{
"date": "2023-10-26T03:57:00",
"db": "JVNDB",
"id": "JVNDB-2023-004140"
},
{
"date": "2023-11-07T04:01:43.933000",
"db": "NVD",
"id": "CVE-2023-0861"
},
{
"date": "2023-02-27T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202302-1355"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202302-1355"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "NetModule\u00a0 of \u00a0netmodule\u00a0router\u00a0software\u00a0 In \u00a0OS\u00a0 Command injection vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2023-004140"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "operating system commend injection",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202302-1355"
}
],
"trust": 0.6
}
}