Xc2000 Firmware

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-31446 CRITICAL POC THREAT Emergency

In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 92.7%.

Command Injection Xc1000 Firmware Xc2000 Firmware

NVD GitHub

CVSS 3.1

9.8

EPSS

92.7%

Threat

6.2

CVE-2023-31446

EPSS 93% 6.2 CVSS 9.8

CRITICAL POC THREAT Emergency

In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 92.7%.

Command Injection Xc1000 Firmware Xc2000 Firmware

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy