CVEvulnerability
CVE-2023-33377
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-08-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-78
Description
Connected IO v2.1.0 and prior has an OS command injection vulnerability in the set firewall command in part of its communication protocol, enabling attackers to execute arbitrary OS commands on devices.
Affected configurations
• connectedio connected io (<= 2.1.0)
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- https://claroty.com/team82/disclosure-dashboard/cve-2023-33377 Third Party Advisory
- https://www.connectedio.com/products/routers Product
- https://claroty.com/team82/disclosure-dashboard/cve-2023-33377 Third Party Advisory
- https://www.connectedio.com/products/routers Product