Parks Fiberlink 210 - RCE (CVE-2023-33617)

CVE-2023-33617 is an OS command injection vulnerability impacting Parks Fiberlink 210 devices. Attackers can exploit this flaw by targeting specific administrative endpoints to execute arbitrary commands on the underlying system.

CrowdSec has been tracking this vulnerability and its exploits since 15th of December 2023.

Data from the CrowdSec community indicates that exploitation of CVE-2023-33617 is highly selective and intelligence-driven. Threat actors use advanced reconnaissance and carefully choose their targets, often as part of sophisticated campaigns or advanced persistent threat operations. Additionally, according to week-over-week analysis by CrowdSec, exploitation of CVE-2023-33617 is surging. Attack volumes are spiking well above historical norms, indicating widespread and escalating interest from threat actors. CVE-2023-33617 is currently experiencing high visibility and active exploitation across the internet.

Observed attempts would typically involve access to administrative URLs associated with network diagnostic features.