Vulnerability · Published Sep 20, 2023 · Assigned by tenable
CVE-2023-43478Unauthenticated configuration restore and firmware update
High 8.8
In plain English
A high-severity security flaw in Smart Modem Gen 2 (Arcadyan LH1000) from Telstra. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 18.0% (higher than 97% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)18.0%top 2.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
fake_upload.cgi on the Telstra Smart Modem Gen 2 (Arcadyan LH1000), firmware versions < 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code execution as root.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Telstra | Smart Modem Gen 2 (Arcadyan LH1000) | 0 – before 0.18.15r |