CVE-2023-33374 | BDVDB-2026-208686 Detail

Description#

Connected IO v2.1.0 and prior has a command as part of its communication protocol allowing the management platform to specify arbitrary OS commands for devices to execute. Attackers abusing this dangerous functionality may issue all devices OS commands to execute, resulting in arbitrary remote command execution.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.connectedio.com/products/routers
https://claroty.com/team82/disclosure-dashboard/cve-2023-33374

Exploit#

No public exploit known

History#

Version 12023-08-04Record published in the CVE List.
Version 22024-10-17Most recent update recorded in the CVE List.