CVE-2024-39784 in AC3000information

Résumé

par MITRE • 14/01/2025

Multiple command execution vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists in the disk_part POST parameter.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Talos

Réserver

28/06/2024

Divulgation

14/01/2025

Modérer

accepté

Entrée

VDB-291589

CPE

prêt

EPSS

0.06193

KEV

non

Activités

très faible

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2024-39784
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2024-39784
CVE Detailshttps://www.cvedetails.com/cve/CVE-2024-39784/

◂ PrécédentAperçuSuivant ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!