CVE-2023-43478

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

fake_upload.cgi on the Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code execution as root.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

Vendor	Product	Versions
Telstra	Smart Modem Gen 2 (Arcadyan LH1000)	< 0.18.15r
telstra	arcadyan_lh1000	< 0.18.15r

References

https://www.tenable.com/security/research/tra-2023-19Exploit, Third Party Advisory
https://www.tenable.com/security/research/tra-2023-19Exploit, Third Party Advisory

Timeline

Published: Sep 20, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-434819.8An issue in Shenzhen TCL Browser TV Web BrowseHere (aka com.tcl.browser) 6.65.022_dab24cc6_231221_gp allows a remote attacker to execute arb CVE-2023-434827.2A command execution vulnerability exists in the guest resource functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 CVE-2023-434846.1Cross-site scripting vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker t CVE-2023-434855.5When TACACS+ audit forwarding is configured on BIG-IP or BIG-IQ system, sharedsecret is logged in plaintext in the audit log. Note: Softwar CVE-2023-434874.7Improper access control in some Intel(R) CST before version 2.1.10300 may allow an authenticated user to potentially enable denial of servic CVE-2023-434887.8The vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be denied, in order to e CVE-2023-434895.5Improper access control for some Intel(R) CIP software before version 2.4.10717 may allow an authenticated user to potentially enable denial CVE-2023-43498.8Use after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corr CVE-2023-434905.3Incorrect calculation in microcode keying mechanism for some Intel(R) Xeon(R) D Processors with Intel(R) SGX may allow a privileged user to CVE-2023-434917.5An information disclosure vulnerability exists in the web interface /cgi-bin/debug_dump.cgi functionality of Peplink Smart Reader v1.2.0 (in CVE-2023-434929.8In Weintek's cMT3000 HMI Web CGI device, the cgi-bin codesys.cgi contains a stack-based buffer overflow, which could allow an anonymous atta CVE-2023-434934.9SQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to