CVE-2023-30764

CVE-2023-30764 is a critical OS command injection vulnerability affecting specific versions of KB-AHR and KB-IRIP series devices. This flaw allows an unauthenticated attacker to execute arbitrary OS commands or alter device settings remotely. With a CVSS score of 9.8 (CRITICAL), the vulnerability is easily exploitable over the network with no user interaction required, leading to complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating potential interest from threat actors.