CVE-2024-11653

Summary

CVE-2024-11653 is a newly disclosed critical vulnerability affecting EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT devices up to version 20241118. The issue is related to an unknown functionality within the /admin/network/diag_traceroute file, which can be exploited through manipulation of the diag_traceroute argument to execute arbitrary commands. This vulnerability poses a remote attack risk, as the exploit has already been made public. Unfortunately, the vendor has not responded to the disclosure, leaving affected users at heightened risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.