9.8
CVSSv3

CVE-2023-42810

Published: 21/09/2023 Updated: 23/09/2023
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

systeminformation is a System Information Library for Node.JS. Versions 5.0.0 up to and including 5.21.6 have a SSID Command Injection Vulnerability. The problem was fixed with a parameter check in version 5.21.7. As a workaround, check or sanitize parameter strings that are passed to `wifiConnections()`, `wifiNetworks()` (string only).

Vulnerable Product Search on Vulmon Subscribe to Product

systeminformation systeminformation