Critical severity9.8NVD Advisory· Published Jun 14, 2023· Updated Jun 17, 2026

CVE-2023-31746

Description

There is a command injection vulnerability in the adslr VW2100 router with firmware version M1DV1.0. An unauthenticated attacker can exploit the vulnerability to execute system commands as the root user.

Affected products

Adslr/Vw2100 Firmware
cpe:2.3:o:adslr:vw2100_firmware:m1dv1.0:*:*:*:*:*:*:*
adslr/VW2100 routerdescription
Adslr/VW2100 routerllm-create
Range: M1DV1.0

Patches

Vulnerability mechanics

References

github.com/D2y6p/CVE/blob/main/adslr/CVE-2023-31746/1/VW2100_RCE1.pdfnvdBroken LinkThird Party Advisory
github.com/D2y6p/CVE/blob/main/adslr/CVE-2023-31746/2/VW2100_RCE2.pdfnvdBroken LinkThird Party Advisory
github.com/D2y6p/CVE/blob/main/adslr/CVE-2023-31746/3/VW2100_RCE3.pdfnvdBroken LinkThird Party Advisory
github.com/D2y6p/CVE/blob/main/adslr/CVE-2023-31746/4/VW2100_RCE4.pdfnvdBroken LinkThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000