CVE-2023-42810

Summary

CVE-2023-42810 is a vulnerability affecting the systeminformation library in Node.JS, versions 5.0.0 to 5.21.6. The issue involves a SSID Command Injection, which could allow an attacker to execute arbitrary commands through specially crafted Wi-Fi SSID parameter strings passed to the `wifiConnections()` and `wifiNetworks()` functions. This vulnerability was fixed in version 5.21.7 through the addition of a parameter check. As a temporary measure, users can sanitize or check parameter strings before passing them to these functions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.