systeminformation is a System Information Library for Node.JS. Versions 5.0.0 through 5.21.6 have a SSID Command Injection Vulnerability. The problem was fixed with a parameter check in version 5.21.7. As a workaround, check or sanitize parameter strings that are passed to `wifiConnections()`, `wifiNetworks()` (string only).
History

Tue, 24 Sep 2024 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2023-09-21T17:11:54.756Z

Updated: 2024-09-24T14:58:02.906Z

Reserved: 2023-09-14T16:13:33.307Z

Link: CVE-2023-42810

cve-icon Vulnrichment

Updated: 2024-08-02T19:30:24.412Z

cve-icon NVD

Status : Modified

Published: 2023-09-21T18:15:12.327

Modified: 2024-11-21T08:23:15.543

Link: CVE-2023-42810

cve-icon Redhat

No data.