Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.2

Unsecured Wi-Fi Service Allows Hackers to Run Malicious Code

CVE-2023-20820 · published 3 years ago
Summary

A security flaw in a Wi-Fi service allows hackers to execute malicious code on the system, potentially compromising the entire network. This means that an attacker can take control of the network without needing to interact with the service. To fix this issue, update the Wi-Fi service with the latest available patch.

Original advisory text
In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privileges needed. User interaction is not ne...
In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00244189; Issue ID: WCNCR00244189.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.2 High
Exploitation
2% chance of attack within 30 days
Timeline
Published4 Sep 2023
Updated3 Nov 2026
First seen11 Mar 2026
Sources
CVE-2023-20820 · OSV
CVE-2023-20820 · NVD
Track software like this
Free during beta