← Back to browse · API

CVE-2023-31446

Severity
CRITICAL
CVSS
9.8
EPSS
0.61081
Risk score
60.58
CISA KEV
No
PoC
No
Published
2024-01-10
Modified
2025-06-20
First seen
2026-08-07
Aliases
EUVD-2023-35754, GHSA-89PH-WR9X-HCFC
Products
n/a:n/a n/a
Sources
euvd EUVD-2023-35754

Description

In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This leads to injecting Bash code and executing it with root privileges on device startup.

References