{"id":"CVE-2023-28390","aliases":["EUVD-2023-32086","GHSA-gfm4-w4mv-hcmp"],"status":"published","title":"Privilege escalation vulnerability in SR-7100VN firmware Ver.1.38(N) and earlier and SR-7100VN ...","description":"Privilege escalation vulnerability in SR-7100VN firmware Ver.1.38(N) and earlier and SR-7100VN #31 firmware Ver.1.21 and earlier allows a network-adjacent attacker with administrative privilege of the affected product to obtain an administrative privilege of the OS (Operating System). As a result, an arbitrary OS command may be executed.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00338,"percentile":0.27454,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2023-05-23T00:00:00Z","modified":"2026-06-17T05:47:36Z","products":[{"vendor":"icom","product":"sr-7100vn\\#31_firmware"},{"vendor":"icom","product":"sr-7100vn_firmware"},{"vendor":"icom incorporated","product":"sr-7100vn"}],"references":[{"url":"https://www.icom.co.jp/news/7239/","tags":["x_transferred","Vendor Advisory"]},{"url":"https://jvn.jp/en/jp/JVN80476232/","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28390"},{"url":"https://jvn.jp/en/jp/JVN80476232"},{"url":"https://www.icom.co.jp/news/7239"},{"url":"https://github.com/advisories/GHSA-gfm4-w4mv-hcmp"}],"sources":{"cve":[{"id":"CVE-2023-28390","description":"Privilege escalation vulnerability in SR-7100VN firmware Ver.1.38(N) and earlier and SR-7100VN #31 firmware Ver.1.21 and earlier allows a network-adjacent attacker with administrative privilege of the affected product to obtain an administrative privilege of the OS (Operating System). As a result, an arbitrary OS command may be executed.","status":"published","published":"2023-05-23T00:00:00Z","modified":"2025-01-17T18:19:45.14Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:35:32.752775Z"}],"euvd":[{"id":"EUVD-2023-32086","description":"Privilege escalation vulnerability in SR-7100VN firmware Ver.1.38(N) and earlier and SR-7100VN #31 firmware Ver.1.21 and earlier allows a network-adjacent attacker with administrative privilege of the affected product to obtain an administrative privilege of the OS (Operating System). As a result, an arbitrary OS command may be executed.","status":"published","published":"2023-05-23T00:00:00Z","modified":"2025-01-17T18:19:45Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T00:04:16.564106Z"}],"ghsa":[{"id":"GHSA-gfm4-w4mv-hcmp","title":"Privilege escalation vulnerability in SR-7100VN firmware Ver.1.38(N) and earlier and SR-7100VN ...","description":"Privilege escalation vulnerability in SR-7100VN firmware Ver.1.38(N) and earlier and SR-7100VN #31 firmware Ver.1.21 and earlier allows a network-adjacent attacker with administrative privilege of the affected product to obtain an administrative privilege of the OS (Operating System). As a result, an arbitrary OS command may be executed.","status":"published","published":"2023-05-23T03:30:17Z","modified":"2024-04-04T04:18:34Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T14:56:22.887174Z"}],"nvd":[{"id":"CVE-2023-28390","description":"Privilege escalation vulnerability in SR-7100VN firmware Ver.1.38(N) and earlier and SR-7100VN #31 firmware Ver.1.21 and earlier allows a network-adjacent attacker with administrative privilege of the affected product to obtain an administrative privilege of the OS (Operating System). As a result, an arbitrary OS command may be executed.","status":"published","published":"2023-05-23T02:15:10.107Z","modified":"2026-06-17T05:47:36.823Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"updated_at":"2026-11-02T14:08:03.200773Z"}]}}