Vulnerabilities > Netmodule > Netmodule Router Software > 4.4.0.118

DATE CVE VULNERABILITY TITLE RISK
2023-10-22 CVE-2023-46306 OS Command Injection vulnerability in Netmodule Router Software
The web administration interface in NetModule Router Software (NRSW) 4.6 before 4.6.0.106 and 4.8 before 4.8.0.101 executes an OS command constructed with unsanitized user input: shell metacharacters in the /admin/gnssAutoAlign.php device_id parameter.
network
high complexity
netmodule CWE-78
6.6
6.6