CVE-2023-0432

The web configuration service of the affected device contains an authenticated command injection vulnerability. It can be used to execute system commands on the operating system (OS) from the device in the context of the user "root." If the attacker has credentials for the web service, then the device could be fully compromised.

• CWE-79
• CWE-79

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-033-05Patch, Third Party Advisory, US Government Resource
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-033-05Patch, Third Party Advisory, US Government Resource

Published

Mar 31, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0425 ABB is aware of vulnerabilities in the product versions lis…7.5
• CVE-2023-0426 ABB is aware of vulnerabilities in the product versions lis…7.5
• CVE-2023-0428The Watu Quiz WordPress plugin before 3.3.8.2 does not sanit…6.1
• CVE-2023-0429The Watu Quiz WordPress plugin before 3.3.8.2 does not sanit…4.8
• CVE-2023-0430Certificate OCSP revocation status was not checked when veri…6.5
• CVE-2023-0431The File Away WordPress plugin through 3.9.9.0.1 does not va…5.4
• CVE-2023-0433Heap-based Buffer Overflow in GitHub repository vim/vim prio…7.8
• CVE-2023-0434Improper Input Validation in GitHub repository pyload/pyload…7.5
• CVE-2023-0435Excessive Attack Surface in GitHub repository pyload/pyload …9.8
• CVE-2023-0436The affected versions of MongoDB Atlas Kubernetes Operator m…7.5
• CVE-2023-0437When calling bson_utf8_validate on some inputs a loop with a…7.5
• CVE-2023-0438Cross-Site Request Forgery (CSRF) in GitHub repository modob…6.5