CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.
CVE
CVE-2023-47254
Severity
CRITICAL
CVSS
9.8
EPSS
2.20%
Original NVD Description
An OS Command Injection in the CLI interface on DrayTek Vigor167 version 5.2.2, allows remote attackers to execute arbitrary system commands and escalate privileges via any account created within the web interface.
Related CVEs
Other vulnerabilities affecting the same vendor(s)