CVE-2023-45467

Vulnerability

The Netis N3Mv2 router firmware version V1.0.1.865 contains a blind OS command injection vulnerability in the ntpServIP parameter of the Time Settings page. The parameter fails to sanitize user input, allowing injection of arbitrary commands that are executed on the underlying operating system [1].

Exploitation

An attacker with access to the router's web interface (typically requiring authentication) can manipulate the ntpServIP parameter in the Time Settings form. By injecting command sequences, the attacker can execute arbitrary OS commands blindly, without direct output, as the application does not reflect the command results [1].

Impact

Successful exploitation grants the attacker full remote code execution (RCE) on the router, leading to complete compromise of the device. The attacker can read sensitive data, modify configuration, or use the router as a pivot for further attacks [1].

Mitigation

As of the publication date, no official patch has been released by Netis. Users are advised to limit network exposure of the router web interface and consider disabling remote access if possible. Firmware updates should be monitored on the vendor's support site [1].