CVE-2023-3991

An OS command injection vulnerability exists in the httpd iperfrun.cgi functionality of FreshTomato 2023.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

• CWE-78
• CWE-78

• https://govtech-csg.github.io/security-advisories/2023/10/16/CVE-2023-3991.htmlThird Party Advisory
• https://govtech-csg.github.io/security-advisories/2023/10/16/CVE-2023-3991.htmlThird Party Advisory

Published

Oct 16, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-3989A vulnerability was found in SourceCodester Jewelry Store Sy…6.1
• CVE-2023-3990A vulnerability classified as problematic has been found in …6.1
• CVE-2023-39902A software vulnerability has been identified in the U-Boot S…7.8
• CVE-2023-39903An issue was discovered in Fujitsu Software Infrastructure M…5
• CVE-2023-39908The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does …7.5
• CVE-2023-39909Ericsson Network Manager before 23.2 mishandles Access Contr…8.8
• CVE-2023-39910The cryptocurrency wallet entropy seeding mechanism used in …7.5
• CVE-2023-39912Zoho ManageEngine ADManager Plus before 7203 allows Help Des…4.9
• CVE-2023-39913Deserialization of Untrusted Data, Improper Input Validation…8.8
• CVE-2023-39914NLnet Labs' bcder library up to and including version 0.7.2 …7.5
• CVE-2023-39915NLnet Labs' Routinator up to and including version 0.12.1 ma…7.5
• CVE-2023-39916NLnet Labs’ Routinator 0.9.0 up to and including 0.12.1 as w…6.5