CVE-2023-2231: MAXTECH MAX-G866ac Remote Management missing authentication

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-04-21 · updated 2026-06-17
Weakness: CWE-306

Description

A vulnerability, which was classified as critical, was found in MAXTECH MAX-G866ac 0.4.1_TBRO_20160314. This affects an unknown part of the component Remote Management. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227001 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

MAXTECH MAX-G866ac: 0.4.1_tbro_20160314

References

https://vuldb.com/?ctiid.227001
https://vuldb.com/?id.227001
https://youtu.be/fikdcK_xlS8
https://vuldb.com/?ctiid.227001
https://vuldb.com/?id.227001
https://youtu.be/fikdcK_xlS8

Get alerted when CVE-2023-2231 or the next vulnerability affects your stack