CVE-2023-33376

—

CVSS 3.1

9.8 critical

EPSS

<1%p55

Published

Aug 4, 2023 (Aug 4, 2023)

Modified

Jun 17, 2026

Description

Connected IO v2.1.0 and prior has an argument injection vulnerability in its iptables command message in its communication protocol, enabling attackers to execute arbitrary OS commands on devices.

Vendors: connectedio
Products: connected io
Weakness: CWE-88
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news1 stories

High-Severity Flaws in ConnectedIO's 3G/4G Routers Raise Concerns for IoT Security

The Hacker NewsOct 9, 10:49 UTC · Oct 9, 2023Vulnerability CVE-2023-33375 CVE-2023-33376 CVE-2023-33377+1 CVEs