VULNERABILITY INTELLIGENCE

CVE-2023-33376

CVSS score9.8 CRITICAL
EPSS probability0.83%
CISA KEVNot currently listed
Published2023-08-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Connected IO v2.1.0 and prior has an argument injection vulnerability in its iptables command message in its communication protocol, enabling attackers to execute arbitrary OS commands on devices.

Weakness classification

  • nvd@nist.gov: CWE-88

Primary references