CVE-2023-46306

The web administration interface in NetModule Router Software (NRSW) 4.6 before 4.6.0.106 and 4.8 before 4.8.0.101 executes an OS command constructed with unsanitized user input: shell metacharacters in the /admin/gnssAutoAlign.php device_id parameter. This occurs because another thread can be started before the trap that triggers the cleanup function. A successful exploit could allow an authenticated user to execute arbitrary commands with elevated privileges. NOTE: this is different from CVE-2023-0861 and CVE-2023-0862, which were fixed in version 4.6.0.105.

• CWE-78
• CWE-78

• https://pentest.blog/advisory-netmodule-router-software-race-condition-leads-to-remote-code-execution/Product, Third Party Advisory
• https://share.netmodule.com/public/system-software/4.6/4.6.0.106/NRSW-RN-4.6.0.106.pdfRelease Notes
• https://share.netmodule.com/public/system-software/4.8/4.8.0.101/NRSW-RN-4.8.0.101.pdfRelease Notes
• https://pentest.blog/advisory-netmodule-router-software-race-condition-leads-to-remote-code-execution/Product, Third Party Advisory
• https://share.netmodule.com/public/system-software/4.6/4.6.0.106/NRSW-RN-4.6.0.106.pdfRelease Notes
• https://share.netmodule.com/public/system-software/4.8/4.8.0.101/NRSW-RN-4.8.0.101.pdfRelease Notes

Published

Oct 22, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-4630An issue has been discovered in GitLab affecting all version…4.3
• CVE-2023-46300iTerm2 before 3.4.20 allow (potentially remote) code executi…9.8
• CVE-2023-46301iTerm2 before 3.4.20 allow (potentially remote) code executi…9.8
• CVE-2023-46302Apache Software Foundation Apache Submarine has a bug when s…9.8
• CVE-2023-46303link_to_local_path in ebooks/conversion/plugins/html_input.p…7.5
• CVE-2023-46304modules/Users/models/Module.php in Vtiger CRM 7.5.0 allows a…8.1
• CVE-2023-46307An issue was discovered in server.js in etcd-browser 87ae63d…7.5
• CVE-2023-46308In Plotly plotly.js before 2.25.2, plot API calls have a ris…9.8
• CVE-2023-46309Missing Authorization vulnerability in AdvancedCoding wpDisc…7.3
• CVE-2023-4631The DoLogin Security WordPress plugin before 3.7 uses header…5.3
• CVE-2023-46310Improper Neutralization of Script-Related HTML Tags in a Web…6.1
• CVE-2023-46311Authorization Bypass Through User-Controlled Key vulnerabili…6.5