CVE-2024-39604

Summary

CVE-2024-39604 is a newly disclosed vulnerability affecting the update_filter_url.sh functionality in Wavlink AC3000 M33A8.V5030.210505. This issue permits an attacker to execute arbitrary commands through a specially crafted HTTP request. The vulnerability can be exploited through a man-in-the-middle attack, making it a significant security threat. Successful exploitation could potentially grant an attacker full control over the affected device. Organizations using Wavlink AC3000 M33A8.V5030.210505 are strongly advised to apply the available patch or update to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.