CVE-2023-51741: This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication cr
CVE-2023-51741 is a high-severity flaw (CVSS 7.5) affecting cm5100 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials in plaintext over the network. A remote attacker could exploit this vulnerability by eavesdropping on the victim’s network traffic to extract username and password from the web interface (Password Reset Page) of the vulnerable targeted system.
Why this priority
- High severity
- Remotely exploitable, no login, no user action
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 7.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.4% (top 69%) |
| CISA exploited list | No |
| Weakness | CWE-319 |
| Published | 2024-01-17 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2023-51741?
cm5100 firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2023-51741 being exploited?
CVE-2023-51741 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2023-51741 affect?
CVE-2023-51741 affects cm5100 firmware. Severity is high (CVSS 7.5). This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials in plaintext over the network. A remote attacker could exploit this vulnerability by eavesdropping on the victim’s netwo
How urgent is CVE-2023-51741?
Priority 39/100. High severity; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2023-51743 MEDIUM 6.5 MITIGATE This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user s
- CVE-2023-51742 MEDIUM 6.5 MITIGATE This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user s
- CVE-2023-51740 HIGH 7.5 MITIGATE This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication cr
- CVE-2023-51739 MEDIUM 6.9 MITIGATE This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user s
- CVE-2023-51738 MEDIUM 6.9 MITIGATE This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user s