{"id":"CVE-2023-27826","aliases":["EUVD-2023-31562","GHSA-fg89-94jg-x86q"],"status":"published","title":"SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are...","description":"SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection. which allows attackers to take over the system with root privilege by abusing doSystem() function.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.11771,"percentile":0.96136,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-78"],"published":"2023-04-12T00:00:00Z","modified":"2026-06-17T05:45:55Z","exploits":[{"source":"exploitdb","id":"EDB-51311","title":"WIMAX SWC-5100W Firmware V(1.11.0.1 :1.9.9.4) - Authenticated RCE","type":"remote","platform":"hardware","date":"2023-04-06","url":"https://www.exploit-db.com/exploits/51311"}],"products":[{"vendor":"seowonintech","product":"swc-5100w_firmware"}],"references":[{"url":"https://pastebin.com/raw/buhVV7iL","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://usermanual.wiki/SEOWON-INTECH/SWC5100W","tags":["x_transferred","Product"]},{"url":"https://www.exploit-db.com/exploits/51311","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27826"},{"url":"https://github.com/advisories/GHSA-fg89-94jg-x86q"}],"sources":{"cve":[{"id":"CVE-2023-27826","description":"SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection. which allows attackers to take over the system with root privilege by abusing doSystem() function.","status":"published","published":"2023-04-12T00:00:00Z","modified":"2025-02-08T02:42:58.661Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:35:26.63732Z"}],"euvd":[{"id":"EUVD-2023-31562","description":"SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection. which allows attackers to take over the system with root privilege by abusing doSystem() function.","status":"published","published":"2023-04-12T00:00:00Z","modified":"2025-02-08T02:42:58Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:04:01.319038Z"}],"ghsa":[{"id":"GHSA-fg89-94jg-x86q","title":"SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are...","description":"SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection. which allows attackers to take over the system with root privilege by abusing doSystem() function.","status":"published","published":"2023-04-12T15:30:45Z","modified":"2024-04-04T03:25:18Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:56:14.876837Z"}],"nvd":[{"id":"CVE-2023-27826","description":"SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection. which allows attackers to take over the system with root privilege by abusing doSystem() function.","status":"published","published":"2023-04-12T13:15:07.573Z","modified":"2026-06-17T05:45:55.473Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:07:55.652109Z"}]}}
