CVE-2023-0861

HIGH

Netmodule Router Software < 4.3.0.119 - Command Injection

Title source: rule

Exploitation Summary

EIP tracks 1 public exploit for CVE-2023-0861. PoCs published by seifallahhomrani1.

AI-analyzed exploit summary This PoC exploits a command injection vulnerability in NetModule routers by leveraging an authenticated session to inject arbitrary commands via the 'device_id' parameter in the GNSS alignment functionality. The payload is executed and the output is retrieved from a file written to the server.

Description

NetModule NSRW web administration interface executes an OS command constructed with unsanitized user input. A successful exploit could allow an authenticated user to execute arbitrary commands with elevated privileges. This issue affects NSRW: from 4.3.0.0 before 4.3.0.119, from 4.4.0.0 before 4.4.0.118, from 4.6.0.0 before 4.6.0.105, from 4.7.0.0 before 4.7.0.103.

Exploits (1)

nomisec WORKING POC 7 stars

by seifallahhomrani1 · poc

https://github.com/seifallahhomrani1/CVE-2023-0861-POC

View Code ZIP pw:eip

This PoC exploits a command injection vulnerability in NetModule routers by leveraging an authenticated session to inject arbitrary commands via the 'device_id' parameter in the GNSS alignment functionality. The payload is executed and the output is retrieved from a file written to the server.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: NetModule Routers (multiple models, web management interface)

Auth required

Prerequisites: Valid admin session ID (PHPSESSID) · Access to the router's web management interface

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution

mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Core References

Third Party Advisory

https://onekey.com/blog/security-advisory-netmodule-multiple-vulnerabilities

Release Notes

https://share.netmodule.com/public/system-software/4.7/4.7.0.103/NRSW-RN-4.7.0.103.pdf

Scores

CVSS v3 7.2

EPSS 0.2866

EPSS Percentile 97.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-77 CWE-78

Status published

Products (1)

netmodule/netmodule_router_software 4.3.0.0 - 4.3.0.119

Published Feb 16, 2023

Tracked Since Feb 18, 2026