https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T20:32:25.449364+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-43477 CVE-2023-43477 — Post-Auth Command Injection in Telstra Smart Modem Gen 2 (Arcadyan LH1000) 2026-10-16T20:32:25.465445+00:00

Affected: Telstra Smart Modem Gen 2 (Arcadyan LH1000), telstra arcadyan_lh1000

The ping_from parameter of ping_tracerte.cgi in the web UI of Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, was not properly sanitized before being used in a system call, which could allow an authenticated attacker to achieve command injection as root on the device.