Vulnerability Details CVE-2023-49237
An issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Command injection can occur because the system function is used by davinci to unpack language packs without strict filtering of URL strings.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.654
EPSS Ranking 98.4%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2023-49237
-
cpe:2.3:h:trendnet:tv-ip1314pi:-
-
cpe:2.3:o:trendnet:tv-ip1314pi_firmware:5.5.3