Netlink Ict Hg323Rw Router
Monthly
Authenticated root-level command execution in the Netlink ICT HG323RW router lets an attacker who already holds valid low-privilege credentials on the adjacent network upload a crafted diagnostic script through the web management interface, which the device then executes with root privileges and is fully compromised as a result. The prerequisites matter: the attacker must be able to reach the router's web management interface (normally confined to the LAN/local segment rather than the public internet) and must supply valid credentials, so real-world exposure is narrower than the raw severity suggests. No public exploit code has been identified at time of analysis and the flaw is not listed in CISA KEV, so prioritization should be driven by asset footprint and the presence of these devices on untrusted or shared network segments rather than by active exploitation.
Authenticated root-level command execution in the Netlink ICT HG323RW router lets an attacker who already holds valid low-privilege credentials on the adjacent network upload a crafted diagnostic script through the web management interface, which the device then executes with root privileges and is fully compromised as a result. The prerequisites matter: the attacker must be able to reach the router's web management interface (normally confined to the LAN/local segment rather than the public internet) and must supply valid credentials, so real-world exposure is narrower than the raw severity suggests. No public exploit code has been identified at time of analysis and the flaw is not listed in CISA KEV, so prioritization should be driven by asset footprint and the presence of these devices on untrusted or shared network segments rather than by active exploitation.