PT-2023-24325 · Mitrastar · Mitrastar Gpt-2741Gnac

CVE-2023-33381 · Publicado 2023-06-03 · Atualizado 2025-01-08

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MitraStar GPT-2741GNAC router version AR g5.8 110WVN0b7 2

Description A command injection issue was found in the ping functionality of the router. This issue allows an authenticated user to execute arbitrary OS commands by sending specially crafted input to the router via the ping function.

Recommendations For MitraStar GPT-2741GNAC router version AR g5.8 110WVN0b7 2, consider disabling the ping function until a patch is available to prevent exploitation of this issue.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2023-33381

Produtos afetados

Mitrastar Gpt-2741Gnac

Referências · 8

• 🔥 https://github.com/duality084/CVE-2023-33381-MitraStar-GPT-2741GNAC/blob/main/README.md · Exploit
• 🔥 https://github.com/duality084/CVE-2023-33381-MitraStar-GPT-2741GNAC · Exploit
• http://mitrastar.com · Nota
• https://t.me/cybersecuritytechnologies/8419 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-33381 · Nota de Segurança
• https://t.me/cvenotify/106803 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-33381 · Aviso do Fabricante
• http://gpt-2741gnac.com · Nota