CVE-2023-22304

Severity: high (CVSS 8.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-01-17 · updated 2026-06-17
Weakness: CWE-78

Description

OS command injection vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101 allows a network-adjacent attacker who can access product settings to execute an arbitrary OS command.

Affected products

PIXELA CORPORATION PIX-RT100: 2.1.1_eq101, 2.1.2_eq101

References

https://jvn.jp/en/jp/JVN57296685/index.html
https://www.pixela.co.jp/products/network/pix_rt100/update.html
https://jvn.jp/en/jp/JVN57296685/index.html
https://www.pixela.co.jp/products/network/pix_rt100/update.html

Get alerted when CVE-2023-22304 or the next vulnerability affects your stack