Critical · 9.8 CVE-2023-29711 EUVD-2023-33249GHSA-79xr-w992-c9fw

An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbitrary code via crafte…

Published Jun 22, 2023 · Updated Dec 12, 2024 · Assigned by mitre

Description

An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbitrary code via crafted GET request.

References

https://holistic-height-e6d.notion.site/LINK-PSG-5124-Switch-remote-command-vulnerability-da4fd8fb450d42879b07ef3a953a2366
https://github.com/shellpei/LINK-Unauthorized/blob/main/CVE-2023-29711