CVE-2024-11655

Summary

CVE-2024-11655 is a newly disclosed critical vulnerability that affects the EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT devices up to version 20241118. This issue lies within the unknown code of the /admin/network/diag_pinginterface file. An attacker can exploit this vulnerability by manipulating the diag_ping argument, resulting in command injection. The exploit can be executed remotely, increasing the severity of the threat. Unfortunately, the vulnerability has been made public, and the vendor has not yet responded to concerns or provided a patch.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.