CVE-2023-30764
Last modified
CVE-2023-30764 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. OS command injection vulnerability exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an arbitrary OS command may be executed on the product or the device settings may be altered. EPSS estimates a 1.54% chance of exploitation in the next 30 days.
Description
OS command injection vulnerability exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an arbitrary OS command may be executed on the product or the device settings may be altered. Affected products and versions are as follows: KB-AHR04D versions prior to 91110.1.101106.78, KB-AHR08D versions prior to 91210.1.101106.78, KB-AHR16D versions prior to 91310.1.101106.78, KB-IRIP04A versions prior to 95110.1.100290.78A, KB-IRIP08A versions prior to 95210.1.100290.78A, and KB-IRIP16A versions prior to 95310.1.100290.78A.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Kbdevice | Kb-Ahr04d Firmware | < 91110.1.101106.78 |
| Kbdevice | Kb-Ahr08d Firmware | < 91210.1.101106.78 |
| Kbdevice | Kb-Ahr16d Firmware | < 91310.1.101106.78 |
| Kbdevice | Kb-Irip04a Firmware | < 95110.1.100290.78a |
| Kbdevice | Kb-Irip08a Firmware | < 95210.1.100290.78a |
| Kbdevice | Kb-Irip16a Firmware | < 95310.1.100290.78a |
References
- https://jvn.jp/en/vu/JVNVU90812349/Third Party Advisory
- https://jvn.jp/en/vu/JVNVU90812349/Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-30764?
How severe is CVE-2023-30764?
How do I fix CVE-2023-30764?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-30758Cross-site scripting vulnerability in Pleasanter 1.3.38.1 an…5.4
- CVE-2023-30759The driver installation package created by Printer Driver Pa…7.8
- CVE-2023-3076The MStore API WordPress plugin before 3.9.9 does not preven…9.8
- CVE-2023-30760Out-of-bounds read in some Intel(R) RealSense(TM) ID softwar…5.5
- CVE-2023-30762Improper authentication vulnerability exists in KB-AHR serie…9.8
- CVE-2023-30763Heap-based overflow in Intel(R) SoC Watch based software bef…6.7
- CVE-2023-30765Delta Electronics InfraSuite Device Master versions prior t…9.8
- CVE-2023-30766Hidden functionality issue exists in KB-AHR series and KB-IR…9.8
- CVE-2023-30767Improper buffer restrictions in Intel(R) Optimization for Te…6.7
- CVE-2023-30768Improper access control in the Intel(R) Server Board S2600WT…6.7
- CVE-2023-30769Vulnerability discovered is related to the peer-to-peer (p2p…9.8
- CVE-2023-3077The MStore API WordPress plugin before 3.9.8 does not saniti…9.8
Are you affected by CVE-2023-30764?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
