Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 14:23:17 +0000 CVE-2023-43477 — Post-Auth Command Injection in Telstra Smart Modem Gen 2 (Arcadyan LH1000) https://cve.radiocsirt.org/vuln/cve-2023-43477 <p><strong>Affected:</strong> Telstra Smart Modem Gen 2 (Arcadyan LH1000), telstra arcadyan_lh1000</p> <p>The ping_from parameter of ping_tracerte.cgi in the web UI of Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions &lt; 0.18.15r, was not properly sanitized before being used in a system call, which could allow an authenticated attacker to achieve command injection as root on the device.</p> <p><strong>Affected:</strong> Telstra Smart Modem Gen 2 (Arcadyan LH1000), telstra arcadyan_lh1000</p> <p>The ping_from parameter of ping_tracerte.cgi in the web UI of Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions &lt; 0.18.15r, was not properly sanitized before being used in a system call, which could allow an authenticated attacker to achieve command injection as root on the device.</p> https://cve.radiocsirt.org/vuln/cve-2023-43477