CVE-2023-41921

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability allows attackers to download source code or an executable from a remote location and execute the code without sufficiently verifying the origin and integrity of the code. This vulnerability can allow attackers to modify the firmware before uploading it to the system, thus achieving the modification of the target’s integrity to achieve an insecure state.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-494

Affected software

No affected versions have been published.

Timeline

Published
Jul 2, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-419225.4A 'Cross-site Scripting' (XSS) vulnerability, characterized by improper input neutralization during web page generation, has been discoveredCVE-2023-419237.2The user management section of the web application permits the creation of user accounts with excessively weak passwords, including single-cCVE-2023-419268.8The webserver utilizes basic authentication for its user login to the configuration interface. As encryption is disabled on port 80, it enabCVE-2023-419275.3The server supports at least one cipher suite which is on the NCSC-NL list of cipher suites to be phased out, increasing the risk of cryptogCVE-2023-419285.3The device is observed to accept deprecated TLS protocols, increasing the risk of cryptographic weaknesses.CVE-2023-419297.3A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to eCVE-2023-41939.8A vulnerability has been found in SourceCodester Resort Reservation System 1.0 and classified as critical. This vulnerability affects unknowCVE-2023-419304.3Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not restrict the 'name' query parameter when rendering a histoCVE-2023-419315.4Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not property sanitize or escape the timestamp value from histoCVE-2023-419326.5Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not restrict 'timestamp' query parameters in multiple endpointCVE-2023-419338.8Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not configure its XML parser to prevent XML external entity (XCVE-2023-419345.3Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask (i.e., replace with asterisks) usernames of