VULNERABILITY INTELLIGENCE

CVE-2023-33378

CVSS score9.8 CRITICAL
EPSS probability0.83%
CISA KEVNot currently listed
Published2023-08-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Connected IO v2.1.0 and prior has an argument injection vulnerability in its AT command message in its communication protocol, enabling attackers to execute arbitrary OS commands on devices.

Weakness classification

  • nvd@nist.gov: CWE-88

Primary references