CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.
CVE
CVE-2023-33374
Severity
CRITICAL
CVSS
9.8
EPSS
1.32%
Original NVD Description
Connected IO v2.1.0 and prior has a command as part of its communication protocol allowing the management platform to specify arbitrary OS commands for devices to execute. Attackers abusing this dangerous functionality may issue all devices OS commands to execute, resulting in arbitrary remote command execution.
Related CVEs
Other vulnerabilities affecting the same vendor(s)