CVE-2024-36295

Summary

CVE-2024-36295 is a newly identified vulnerability affecting the qos.cgi qos_sta() functionality in Wavlink AC3000 M33A8's firmware version V5030.210505. This issue permits an attacker to execute arbitrary commands through a specially crafted HTTP request. Successful exploitation requires authentication. Command execution vulnerabilities can lead to serious consequences, including unauthorized system access and data theft. It is recommended that affected device users upgrade to the latest firmware version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.