CVE-2023-31198

OS command injection vulnerability exists in Wi-Fi AP UNIT allows. If this vulnerability is exploited, a remote authenticated attacker with an administrative privilege to execute an arbitrary OS command. Affected products and versions are as follows: AC-PD-WAPU v1.05_B04 and earlier, AC-PD-WAPUM v1.05_B04 and earlier, AC-PD-WAPU-P v1.05_B04P and earlier, AC-PD-WAPUM-P v1.05_B04P and earlier, AC-WAPU-300 v1.00_B07 and earlier, AC-WAPUM-300 v1.00_B07 and earlier, AC-WAPU-300-P v1.00_B07 and earlier, and AC-WAPUM-300-P v1.00_B07 and earlier

• CWE-78
• CWE-78

• https://jvn.jp/en/jp/JVN28412757/Mitigation, Third Party Advisory
• https://www.inaba.co.jp/abaniact/news/Wi-Fi_AP_UNIT%E3%81%AB%E3%81%8A%E3%81%91%E3%82%8B%E8%A4%87%E6%95%B0%E3%81%AE%E8%84%86%E5%BC%B1%E6%80%A7%E3%81%AB%E3%81%A4%E3%81%84%E3%81%A6.pdfVendor Advisory
• https://jvn.jp/en/jp/JVN28412757/Mitigation, Third Party Advisory
• https://www.inaba.co.jp/abaniact/news/Wi-Fi_AP_UNIT%E3%81%AB%E3%81%8A%E3%81%91%E3%82%8B%E8%A4%87%E6%95%B0%E3%81%AE%E8%84%86%E5%BC%B1%E6%80%A7%E3%81%AB%E3%81%A4%E3%81%84%E3%81%A6.pdfVendor Advisory

Published

Jun 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-31192An information disclosure vulnerability exists in the Client…5.3
• CVE-2023-31193 Snap One OvrC Pro versions prior to 7.3 use HTT…7.5
• CVE-2023-31194An improper array index validation vulnerability exists in t…7.8
• CVE-2023-31195ASUS Router RT-AX3000 Firmware versions prior to 3.0.0.4.388…5.3
• CVE-2023-31196Missing authentication for critical function in Wi-Fi AP UNI…7.5
• CVE-2023-31197Uncontrolled search path in the Intel(R) Trace Analyzer and …7.8
• CVE-2023-31199Improper access control in the Intel(R) Solid State Drive To…6.7
• CVE-2023-3120A vulnerability, which was classified as critical, was found…7.2
• CVE-2023-31200 PTC Vuforia Studio does not require a token; this could…8
• CVE-2023-31203Improper input validation in some OpenVINO Model Server soft…7.5
• CVE-2023-31206Exposure of Resource to Wrong Sphere Vulnerability in Apache…7.5
• CVE-2023-31207Transmission of credentials within query parameters in Check…5.5