VULNERABILITY INTELLIGENCE

CVE-2023-28391

CVSS score9.8 CRITICAL

EPSS probability1.47%

CISA KEVNot currently listed

Published2023-11-14

Last modified2026-06-17

Description

A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01. Specially crafted network packets can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability.