RCE in Mobotix Mx6
CVE-2023-34873
On MOBOTIX P3 cameras before MX-V4.7.2.18 and Mx6 cameras before MX-V5.2.0.61, the tcpdump feature does not properly validate input, which allows authenticated users to execute code.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.004 (31.4th percentile) — read the EPSS interpretation.
Affected products
- Mobotix Mx6 — versions 0
- Mobotix P3 — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2023-34873?
- CVE-2023-34873 is a vulnerability in Mobotix Mx6, classified under OS Command Injection. Published 2025-05-23.
- Is CVE-2023-34873 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.