CVE-2023-42495

published 2023-12-13

CVE-2023-42495: Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Priority P2 63 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected

2 ranges

Vendor	Product	Version range	Fixed in
dasan_networks	dasan_networks	>= All versions < Upgrade to the latest version.	Upgrade to the latest version.
dasannetworks	w-web	1.22 – 1.27	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-78