Rewterz Threat Alert – Bitter APT Group – Active IOCs
November 13, 2023
Severity
High
Analysis Summary
CVE-2023-41182 CVSS:7.2
NETGEAR NMS300 could allow a remote attacker to execute arbitrary commands on the system, caused by improper neutralization of user-supplied input. By sending a specially crafted request using the password parameter, an attacker could exploit this vulnerability to execute arbitrary commands on the system.
CVE-2023-41183 CVSS:8.8
NETGEAR RBR760 could allow a remote attacker to bypass security restrictions. By sending a specially crafted request, an attacker could exploit this vulnerability to bypass authentication on the system.
Impact
- Gain Access
- Security Bypass
Indicators Of Compromise
CVE
- CVE-2023-41182
- CVE-2023-41183
Affected Vendors
NETGEAR
Affected Products
- NETGEAR NMS300
- NETGEAR RBR760
Remediation
Refer to NETGEAR Security Advisory for patch, upgrade or suggested workaround information.