CVE-2023-0351: Code Injection
Published Mar 13, 2023
·Updated
The Akuvox E11 web server backend library allows command injection in the device phone-book contacts functionality. This could allow an attacker to upload files with executable command instructions.
Affected Software
3 affected components
Akuvox E11
Akuvox E11 Firmware
Akuvox E11
Event History
Mar 13, 2023
CVE Published
via MITRE·08:22 PM
Data Sourced
via MITRE·08:22 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-0351?
CVE-2023-0351 is rated as a critical severity vulnerability due to its ability to allow remote command injection.
2
How do I fix CVE-2023-0351?
To fix CVE-2023-0351, it is recommended to update to the latest version of the Akuvox E11 firmware that mitigates this vulnerability.
3
What devices are affected by CVE-2023-0351?
CVE-2023-0351 affects the Akuvox E11 devices and their corresponding firmware.
4
What types of attacks can CVE-2023-0351 facilitate?
CVE-2023-0351 can facilitate attacks that involve uploading files with executable command instructions to the device.
5
Is there any known proof of concept for CVE-2023-0351?
Currently, there is no publicly available proof of concept specifically documented for CVE-2023-0351.