CVE-2024-39367

Summary

CVE-2024-39367 is a critical vulnerability affecting the iptablesWebsFilterRun() functionality in the firewall.cgi of Wavlink AC3000 M33A8.V5030.210505. This issue allows for an attacker to inject and execute arbitrary operating system commands through a specially crafted HTTP request. Authenticated access is required to exploit this vulnerability, making it a significant threat to network security. Successful exploitation can lead to unauthorized system access, data theft, or even complete system compromise. It is recommended that affected device owners apply the necessary patches or updates as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.