CVE-2024-51228 in CX-A3002RU

Riassunto

di MITRE • 27/11/2024

An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and TOTOLINK-CX-N300RT V2.1.6-B20170724.1420 and TOTOLINK-CX-N300RT V2.1.8-B20171113.1408 and TOTOLINK-CX-N300RT V2.1.8-B20191010.1107 and TOTOLINK-CX-N302RE V2.0.2-B20170511.1523 allows a remote attacker to execute arbitrary code via the /boafrm/formSysCmd component.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsabile: MITRE
• Prenotare: 28/10/2024
• Divulgazione: 27/11/2024
• Moderazione: accettato
• Voce: VDB-286273
• CPE: pronto
• CWE: CWE-78 (confermato)
• CVSS: 6.8 (CNA)
• EPSS: 0.03898
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-51228
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-51228
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-51228/