A command injection vulnerability was found in the ping functionality of the MitraStar GPT-2741GNAC router (firmware version AR_g5.8_110WVN0b7_2). The vulnerability allows an authenticated user to execute arbitrary OS commands by sending specially crafted input to the router via the ping function.
References
| Link | Resource |
|---|---|
| http://gpt-2741gnac.com | Broken Link |
| http://mitrastar.com | Broken Link |
| https://github.com/duality084/CVE-2023-33381-MitraStar-GPT-2741GNAC/blob/main/README.md | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
15 Jun 2023, 14:04
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.2 |
| CWE | CWE-78 | |
| CPE | cpe:2.3:o:mitrastar:gpt-2741gnac_firmware:ar_g5.8_110wvn0b7_2:*:*:*:*:*:*:* cpe:2.3:h:mitrastar:gpt-2741gnac:-:*:*:*:*:*:*:* |
|
| First Time |
Mitrastar gpt-2741gnac
Mitrastar gpt-2741gnac Firmware Mitrastar |
|
| References | (MISC) https://github.com/duality084/CVE-2023-33381-MitraStar-GPT-2741GNAC/blob/main/README.md - Exploit, Third Party Advisory | |
| References | (MISC) http://gpt-2741gnac.com - Broken Link | |
| References | (MISC) http://mitrastar.com - Broken Link |
06 Jun 2023, 12:50
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-06 12:15
Updated : 2023-12-10 15:01
NVD link : CVE-2023-33381
Mitre link : CVE-2023-33381
CVE.ORG link : CVE-2023-33381
JSON object : View
Products Affected
mitrastar
- gpt-2741gnac_firmware
- gpt-2741gnac
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')