CVE-2024-39370

Summary

CVE-2024-39370 is a newly disclosed vulnerability that impacts the set_MeshAp() functionality in the adm.cgi component of Wavlink AC3000 M33A8.V5030.210505. This issue allows an attacker to execute arbitrary code through a specially crafted HTTP request. The vulnerability is considered dangerous because it can be exploited by an authenticated user, enabling an attacker to gain unauthorized control over the affected device. Successful exploitation of this vulnerability could potentially lead to serious consequences, including unauthorized access, data theft, or system damage. Users are strongly encouraged to apply the necessary patches or upgrades to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.