by Kastro
Paper/Archive/CVE-2023-43478

CVE-2023-43478

Telstra Smart Modem Gen 2 (Arcadyan LH1000) — Unauthenticated configuration restore and firmware update

EPSS 18%public exploitCVSS 9.8
critical.is priorityof 100
59
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 97.2.972 × 2019.4Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

fake_upload.cgi on the Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code execution as root.

Affected

ProductAffectedFixed inSource
Smart Modem Gen 2 (Arcadyan LH1000)< 0.18.15r0.18.15rCNA
arcadyan_lh1000< 0.18.15r0.18.15rCISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
tenable (CNA)8.8CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

reftenable.com/security/research/tra-2023-19