CVE-2023-38862
- Reference to the description:
- Description:
- An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the destination parameter of sub_431F64 function in bin/webmgnt.
- Last updated date:
- 08/22/2023
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 08/22/2023
- Reference url to background
https://github.com/TTY-flag/my_iot_vul/tree/main/COMFAST/CF-XR11/Command_Inject1