CVE-2023-35762: OS Command Injection in INEA ME RTU
Published Nov 20, 2023
·Updated
Versions of INEA ME RTU firmware 3.36b and prior are vulnerable to operating system (OS) command injection, which could allow remote code execution.
Affected Software
2 affected components
All of the following
INEA ME RTU firmware<3.37
INEA ME RTU
Remediation
Information
INEA recommends users to upgrade ME RTU to firmware version 3.37 https://www.inea.si/en/telemetrija-in-m2m-produkti/mertu-en/ .
Event History
Nov 20, 2023
CVE Published
04:25 PM
Data Sourced
04:25 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-35762?
CVE-2023-35762 is a vulnerability that allows for OS command injection in INEA ME RTU firmware versions 3.36b and prior, potentially leading to remote code execution.
2
What is the severity of CVE-2023-35762?
CVE-2023-35762 has a severity rating of 9.9, which is classified as critical.
3
How does CVE-2023-35762 affect INEA ME RTU firmware?
CVE-2023-35762 affects INEA ME RTU firmware versions 3.36b and prior, allowing for OS command injection.
4
Is INEA ME RTU software vulnerable to CVE-2023-35762?
No, INEA ME RTU software is not vulnerable to CVE-2023-35762.
5
How can I fix CVE-2023-35762?
To fix CVE-2023-35762, it is recommended to update the INEA ME RTU firmware to version 3.37 or above.