CVE-2023-42128

Magnet Forensics AXIOM Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Magnet Forensics AXIOM. User interaction is required to exploit this vulnerability in that the target must acquire data from a malicious mobile device. The specific flaw exists within the Android device image acquisition functionality. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-21255.

• CWE-78
• CWE-77

• https://www.zerodayinitiative.com/advisories/ZDI-23-1533/Third Party Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-23-1533/Third Party Advisory

Published

May 3, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-42122Control Web Panel wloggui Command Injection Local Privilege …7.8
• CVE-2023-42123Control Web Panel mysql_manager Command Injection Remote Cod…8.8
• CVE-2023-42124Avast Premium Security Sandbox Protection Incorrect Authoriz…7.8
• CVE-2023-42125Avast Premium Security Sandbox Protection Link Following Pri…7.8
• CVE-2023-42126G DATA Total Security GDBackupSvc Service Link Following Loc…7.8
• CVE-2023-42127Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote …7.8
• CVE-2023-42129A10 Thunder ADC ShowTechDownloadView Directory Traversal Inf…6.5
• CVE-2023-4213The Simplr Registration Form Plus+ plugin for WordPress is v…8.8
• CVE-2023-42130A10 Thunder ADC FileMgmtExport Directory Traversal Arbitrary…8.8
• CVE-2023-42131Ansys SpaceClaim X_B File Parsing Out-Of-Bounds Write Remote…7.8
• CVE-2023-42132FD Application Apr. 2022 Edition (Version 9.01) and earlier …5.5
• CVE-2023-42133PAX Android based POS devices allow for escalation of privil…6.7