CVE-2024-3659

Summary

CVE-2024-3659 is a vulnerability affecting the firmware in KAON AR2140 routers before version 4.2.16. An attacker can exploit this issue by sending a crafted request to specific endpoints, leading to a shell command injection. To successfully carry out an attack, the adversary must have access to the administrative portal of the affected router. This vulnerability poses a significant risk if not addressed promptly, as it could allow an attacker to execute arbitrary commands and potentially gain unauthorized access or cause denial-of-service conditions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.