47
CVE-2023-33378
—CVSS 3.1
9.8 critical
EPSS
<1%p55
Published
()
Modified
Description
Connected IO v2.1.0 and prior has an argument injection vulnerability in its AT command message in its communication protocol, enabling attackers to execute arbitrary OS commands on devices.
- Vendors
- connectedio
- Products
- connected io
- Weakness
- CWE-88
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H