CVE-2024-11659

Summary

CVE-2024-11659 is a critical vulnerability affecting the EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT devices up to version 20241118. This issue lies within the /admin/network/diag_iperf file and allows attackers to perform command injection through manipulation of the iperf argument. The exploit can be executed remotely, and the vulnerability has been publicly disclosed, increasing the risk of exploitation. Despite early notification, the vendor has yet to respond to the disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.