CVE-2023-46306

MEDIUM

6.6

CVSS Score

Published: October 22, 2023 at 12:00 AM UTC

Updated: June 17, 2026 at 06:30 AM UTC

9 products affected across 1 vendorNetmodule Router SoftwareNb1810Nb3701

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.6

Exploit prediction

EPSS 1%

SSVC

PoC

Description

The web administration interface in NetModule Router Software (NRSW) 4.6 before 4.6.0.106 and 4.8 before 4.8.0.101 executes an OS command constructed with unsanitized user input: shell metacharacters in the /admin/gnssAutoAlign.php device_id parameter. This occurs because another thread can be started before the trap that triggers the cleanup function. A successful exploit could allow an authenticated user to execute arbitrary commands with elevated privileges. NOTE: this is different from CVE-2023-0861 and CVE-2023-0862, which were fixed in version 4.6.0.105.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Netmodule Router Software · Netmodule

95%

v < 4.6.0.1054.6.0.0 ≤ v < 4.6.0.1064.7.0.0 ≤ v < 4.7.0.1034.8 ≤ v < 4.8.0.1014.6.0.0 4.8

Affected range stops below 4.6.0.105, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.6.0.106, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.7.0.103, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.8.0.101, so it looks safe — our inference, not a vendor statement

netmodule-nb1601 (environment) · netmodule-nb1800 (environment) · netmodule-nb1810 (environment) · netmodule-nb2800 (environment) · netmodule-nb2810 (environment) · netmodule-nb3701 (environment) · netmodule-nb3800 (environment) · netmodule-ng800 (environment)

Nb1601 · Netmoduledevice

80%

All versions

Nb1800 · Netmoduledevice

80%

All versions

Nb1810 · Netmoduledevice

80%

All versions

Nb2800 · Netmoduledevice

80%

All versions