CVE-2024-11656
CVSS 3.1 Score 7.2 of 10 (high)
Details
Published Nov 25, 2024
Updated: Dec 10, 2024
CWE ID 77
CWE ID 74
Summary
CVE-2024-13656 is a critical vulnerability affecting EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT devices up to version 20241118. This issue arises from the unsecured processing of the /admin/network/diag_ping6 file, allowing an attacker to inject commands remotely. The manipulation of the diag_ping6 argument can lead to command injection, posing a significant risk. The exploit for this vulnerability has been made public, and the vendor was notified but did not provide a response, leaving affected users at risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.