CVE-2023-30766
Last modified
CVE-2023-30766 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Hidden functionality issue exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an arbitrary OS command may be executed on the product or the device settings may be altered. EPSS estimates a 0.70% chance of exploitation in the next 30 days.
Description
Hidden functionality issue exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an arbitrary OS command may be executed on the product or the device settings may be altered. Affected products and versions are as follows: KB-AHR04D versions prior to 91110.1.101106.78, KB-AHR08D versions prior to 91210.1.101106.78, KB-AHR16D versions prior to 91310.1.101106.78, KB-IRIP04A versions prior to 95110.1.100290.78A, KB-IRIP08A versions prior to 95210.1.100290.78A, and KB-IRIP16A versions prior to 95310.1.100290.78A.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Kbdevice | Kb-Ahr04d Firmware | < 91110.1.101106.78 |
| Kbdevice | Kb-Ahr08d Firmware | < 91210.1.101106.78 |
| Kbdevice | Kb-Ahr16d Firmware | < 91310.1.101106.78 |
| Kbdevice | Kb-Irip04a Firmware | < 95110.1.100290.78a |
| Kbdevice | Kb-Irip08a Firmware | < 95210.1.100290.78a |
| Kbdevice | Kb-Irip16a Firmware | < 95310.1.100290.78a |
References
- https://jvn.jp/en/vu/JVNVU90812349/Third Party Advisory
- https://jvn.jp/en/vu/JVNVU90812349/Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-30766?
How severe is CVE-2023-30766?
How do I fix CVE-2023-30766?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-3076The MStore API WordPress plugin before 3.9.9 does not preven…9.8
- CVE-2023-30760Out-of-bounds read in some Intel(R) RealSense(TM) ID softwar…5.5
- CVE-2023-30762Improper authentication vulnerability exists in KB-AHR serie…9.8
- CVE-2023-30763Heap-based overflow in Intel(R) SoC Watch based software bef…6.7
- CVE-2023-30764OS command injection vulnerability exists in KB-AHR series a…9.8
- CVE-2023-30765Delta Electronics InfraSuite Device Master versions prior t…9.8
- CVE-2023-30767Improper buffer restrictions in Intel(R) Optimization for Te…6.7
- CVE-2023-30768Improper access control in the Intel(R) Server Board S2600WT…6.7
- CVE-2023-30769Vulnerability discovered is related to the peer-to-peer (p2p…9.8
- CVE-2023-3077The MStore API WordPress plugin before 3.9.8 does not saniti…9.8
- CVE-2023-30770A stack-based buffer overflow vulnerability was found in the…9.8
- CVE-2023-30771Incorrect Authorization vulnerability in Apache Software Fou…9.8
Are you affected by CVE-2023-30766?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
