CVE-2023-27796: Command Injection
RG-EW1200G PRO Wireless Routers EW3.0(1)B11P204, RG-EW1800GX PRO Wireless Routers EW3.0(1)B11P204, and RG-EW3200GX PRO Wireless Routers EW3.0(1)B11P204 were discovered to contain multiple command injection vulnerabilities via the data.ip, data.protocal, data.iface and data.package parameters in the runPackDiagnose function of diagnose.lua.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-27796?
CVE-2023-27796 is a vulnerability found in RG-EW1200G PRO, RG-EW1800GX PRO, and RG-EW3200GX PRO Wireless Routers that allows command injection via certain parameters.
How severe is CVE-2023-27796?
CVE-2023-27796 has a severity rating of 8.8 out of 10, indicating a high severity.
Which software versions are affected by CVE-2023-27796?
RG-EW1200G PRO Firmware version ew_3.0(1)B11P204, RG-EW1800GX PRO Firmware version ew_3.0(1)B11P204, and RG-EW3200GX PRO Firmware version ew_3.0(1)B11P204 are affected by CVE-2023-27796.
How can the CVE-2023-27796 vulnerability be exploited?
The CVE-2023-27796 vulnerability can be exploited by sending malicious data via the data.ip, data.protocal, data.iface, and data.package parameters in the affected routers.
Where can I find more information about CVE-2023-27796?
You can find more information about CVE-2023-27796, including technical details and mitigation measures, at the following link: [GitHub - winmt/my-vuls](https://github.com/winmt/my-vuls/tree/main/RG-EW%20PRO%20Series)