CVE-2023-30400: Anyka AK3918EV300 Firmware

Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days.

An issue was discovered in Anyka Microelectronics AK3918EV300 MCU v18. A command injection vulnerability in the network configuration script within the MCU's operating system allows attackers to perform arbitrary command execution via a crafted wifi SSID or password.

Affected products

• Anyka AK3918EV300 Firmware: version 18 only

Published 2023-06-07. Last modified 2026-06-17.