Critical severity9.8NVD Advisory· Published Aug 15, 2023· Updated Jun 17, 2026
CVE-2023-38864
CVE-2023-38864
Description
An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the protal_delete_picname parameter in the sub_41171C function at bin/webmgnt.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:comfast:cf-xr11_firmware:2.7.2:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- github.com/TTY-flag/my_iot_vul/tree/main/COMFAST/CF-XR11/Command_Inject3nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.