CVE-2023-43478 — Unauthenticated configuration restore and firmware update
fake_upload.cgi on the Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration ba…
Published: 2023-09-20 · CVSS: 8.8 · CVSS 3.1
fake_upload.cgi on the Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code execution as root.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7