CVEvulnerability

CVE-2023-33378

9.8 CRITICAL Published 2023-08-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-88

Description

Connected IO v2.1.0 and prior has an argument injection vulnerability in its AT command message in its communication protocol, enabling attackers to execute arbitrary OS commands on devices.

Affected configurations

• connectedio connected io (<= 2.1.0)

Related

Weakness · CWE (1)

  • CWE-88 Improper Neutralization of Argument Delimiters in a Command weakness

References