CVE-2023-27826

HIGH

8.8

Description

SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection. which allows attackers to take over the system with root privilege by abusing doSystem() function.

CVE Details

CVSS v3.1 Score8.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published4/12/2023

Last Modified2/8/2025

Sourcenvd

Honeypot Sightings0

Affected Products

seowonintech:swc-5100wseowonintech:swc-5100w_firmware

Weaknesses (CWE)

CWE-78CWE-78

References

https://pastebin.com/raw/buhVV7iL(cve@mitre.org)

https://usermanual.wiki/SEOWON-INTECH/SWC5100W(cve@mitre.org)

https://www.exploit-db.com/exploits/51311(cve@mitre.org)

https://pastebin.com/raw/buhVV7iL(af854a3a-2127-422b-91ae-364da2661108)

https://usermanual.wiki/SEOWON-INTECH/SWC5100W(af854a3a-2127-422b-91ae-364da2661108)

https://www.exploit-db.com/exploits/51311(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.