CRITICAL🇵🇱 Wersja polska

CVE-2023-42810

CVSS 9.8v3.1pub. 2023-09-21upd. 2024-11-21

systeminformation is a System Information Library for Node.JS. Versions 5.0.0 through 5.21.6 have a SSID Command Injection Vulnerability. The problem was fixed with a parameter check in version 5.21.7. As a workaround, check or sanitize parameter strings that are passed to `wifiConnections()`, `wifiNetworks()` (string only).

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Systeminformation

    APP
    Systeminformation
    5.0.0 – 5.21.7 (bez)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-21315HIGH7.1⚠ KEVten sam produkt

The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of f...

CVE-2026-26318HIGH8.8ten sam produkt

systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable ...

CVE-2026-26280HIGH8.4ten sam produkt

systeminformation is a System and OS information library for node.js. In versions prior to 5.30.8, a command i...

CVE-2025-68154HIGH8.1ten sam produkt

systeminformation is a System and OS information library for node.js. In versions prior to 5.27.14, the `fsSiz...

CVE-2021-21388HIGH8.9ten sam produkt

systeminformation is an open source system and OS information library for node.js. A command injection vulnera...