← All advisories

Critical severity9.8NVD Advisory· Published Aug 15, 2023· Updated Jun 17, 2026

CVE-2023-38862

CVE-2023-38862

Description

An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the destination parameter of sub_431F64 function in bin/webmgnt.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Comfast/Cf Xr11 Firmware
cpe:2.3:o:comfast:cf-xr11_firmware:2.7.2:*:*:*:*:*:*:*
Comfast/CF-XR11cpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 2.7.2

Patches

Vulnerability mechanics

References

1

github.com/TTY-flag/my_iot_vul/tree/main/COMFAST/CF-XR11/Command_Inject1nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.