CVE-2023-41917

CriticalCVSS 10.0/10Last modified Jun 17, 2026

Description

Inadequate input validation exposes the system to potential remote code execution (RCE) risks. Attackers can exploit this vulnerability by appending shell commands to the Speed-Measurement feature, enabling unauthorized code execution.

Metrics

CVSS 3.1 10.0/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Jul 2, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2023

CVE-2023-4191810.0A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs. Attackers may exploit this to unauthenticated CVE-2023-419199.8Hardcoded credentials are discovered within the application's source code, creating a potential security risk for unauthorized access.CVE-2023-41929.8A vulnerability, which was classified as critical, was found in SourceCodester Resort Reservation System 1.0. This affects an unknown part o CVE-2023-419209.8The vulnerability allows attackers access to the root account without having to authenticate. Specifically, if the device is configured with CVE-2023-419219.8A vulnerability allows attackers to download source code or an executable from a remote location and execute the code without sufficiently v CVE-2023-419225.4A 'Cross-site Scripting' (XSS) vulnerability, characterized by improper input neutralization during web page generation, has been discovered CVE-2023-419237.2The user management section of the web application permits the creation of user accounts with excessively weak passwords, including single-c CVE-2023-419268.8The webserver utilizes basic authentication for its user login to the configuration interface. As encryption is disabled on port 80, it enab CVE-2023-419275.3The server supports at least one cipher suite which is on the NCSC-NL list of cipher suites to be phased out, increasing the risk of cryptog CVE-2023-419285.3The device is observed to accept deprecated TLS protocols, increasing the risk of cryptographic weaknesses.CVE-2023-419297.3A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to e CVE-2023-41939.8A vulnerability has been found in SourceCodester Resort Reservation System 1.0 and classified as critical. This vulnerability affects unknow