CVE-2023-2131

—

CVSS 3.1

9.8 critical

EPSS

2%p75

Published

Apr 20, 2023 (Apr 20, 2023)

Modified

Jun 17, 2026

Description

Versions of INEA ME RTU firmware prior to 3.36 are vulnerable to OS command injection, which could allow an attacker to remotely execute arbitrary code.

Vendors: inea
Products: me rtu firmware
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news1 stories

CISA Issues Advisory on Critical RCE Affecting ME RTU Remote Terminal Units

The Hacker NewsMay 3, 05:07 UTC · May 3, 2023Vulnerability CVE-2023-2131