CVE-2023-26609

CVSS 7.2 HIGHEPSS 38.7%◆ VulnCheck KEV

Vexday Risk Score

75High priority

SSVC decision (CISA)

Act

Exploitation + impact → act immediately

Exploit maturity

Proof of concept

Public proof of concept exists, but not yet automated.

CVSS 7.2EPSS 38.7%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

27 Feb 2023Published on NVD

06 Apr 2023Public PoC

Weaponization speed

38 daysto first PoC

Recommendation: Patch as soon as possible — active exploitation confirmed.

ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin/mft/wireless_mft ap field.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

public PoCs found — 3

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References