CVE-2023-41011

CRITICAL

chinamobile intelligent_home_gateway_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2023-41011 has a selected CVSS score of 9.8 (critical).

Description

Command Execution vulnerability in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the shortcut_telnet.cg component.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Oct 19, 2025 · VulnCheck
Reported exploitation
Observed · VulnCheck

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 25, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

china_mobile_intelligent_home_gateway

Browse china_mobile_communications / china_mobile_intelligent_home_gateway

Default status: unknown

CVE Listv.hg6543c4affected

intelligent_home_gateway_firmware

Browse chinamobile / intelligent_home_gateway_firmware
VulnCheckVersion data not supplied

References

2