CVE-2023-31746

Summary

CVE-2023-31746 is a command injection vulnerability affecting the adslr VW2100 router with firmware version M1DV1.0. An attacker, without needing authentication, can exploit this vulnerability to inject and execute system commands with root privileges. This poses a significant risk, as an unauthorized user could gain full control over the affected device and potentially use it as a launchpad for further attacks on the network. The exploitation of this vulnerability could lead to unauthorized access, data theft, or system damage. Users are advised to upgrade their firmware as soon as a patch is available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.