CVE-2024-11652

CVSS 3.1 Score 7.2 of 10 (high)

Details

Published Nov 25, 2024
Updated: Dec 10, 2024
CWE ID 77
CWE ID 74

Summary

CVE-2024-11652 is a critical vulnerability affecting EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT devices up to version 20241118. This issue lies in an unknown functionality of the file /admin/sn_package/sn_https. Attackers can exploit this vulnerability by manipulating the argument https_enable, leading to command injection. The exploit can be executed remotely, making it a significant threat. Unfortunately, the details of this vulnerability have been made public, increasing the risk of attacks. Despite early disclosure to the vendor, no response or patch has been provided yet.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share