CVE-2024-39764
CVSS 3.1 Score 9.1 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 77
Summary
CVE-2024-39764 is a recently disclosed vulnerability affecting the set_add_routing() functionality of Wavlink AC3000 M33A8's internet.cgi. This issue permits an attacker to execute arbitrary OS commands via a specially crafted HTTP request. The vulnerability targets the `dest` POST parameter, making it exploitable for authenticated users. This command injection flaw poses a significant risk, allowing attackers to gain unauthorized access or cause system instability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.