CVE-2023-27826

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection. which allows attackers to take over the system with root privilege by abusing doSystem() function.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://pastebin.com/raw/buhVV7iLExploit, Third Party Advisory
https://usermanual.wiki/SEOWON-INTECH/SWC5100WProduct
https://www.exploit-db.com/exploits/51311Exploit, Third Party Advisory, VDB Entry
https://pastebin.com/raw/buhVV7iLExploit, Third Party Advisory
https://usermanual.wiki/SEOWON-INTECH/SWC5100WProduct
https://www.exploit-db.com/exploits/51311Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Apr 12, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-27834.3Mattermost Apps Framework fails to verify that a secret provided in the incoming webhook request allowing an attacker to modify the contents CVE-2023-278309.0TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate files with crafted fil CVE-2023-278369.8TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the devicePwd parameter in the CVE-2023-278379.8TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the key parameter in the functi CVE-2023-27846.5Mattermost fails to verify if the requestor is a sysadmin or not, before allowing `install` requests to the Apps allowing a regular user sen CVE-2023-278428.8Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via CVE-2023-278439.8SQL injection vulnerability found in PrestaShop askforaquote v.5.4.2 and before allow a remote attacker to gain privileges via the QuotesPro CVE-2023-278449.8SQL injection vulnerability found in PrestaShopleurlrewrite v.1.0 and before allow a remote attacker to gain privileges via the Dispatcher::CVE-2023-278459.8SQL injection vulnerability found in PrestaShop lekerawen_ocs before v.1.4.1 allow a remote attacker to gain privileges via the KerawenHelpe CVE-2023-278469.8SQL injection vulnerability found in PrestaShop themevolty v.4.0.8 and before allow a remote attacker to gain privileges via the tvcmsblog, CVE-2023-278479.8SQL injection vulnerability found in PrestaShop xipblog v.2.0.1 and before allow a remote attacker to gain privileges via the xipcategorycla CVE-2023-278489.8broccoli-compass v0.2.4 was discovered to contain a remote code execution (RCE) vulnerability via the child_process function.