CVE-2024-39786
CVSS 3.1 Score 9.1 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 22
Summary
CVE-2024-39786 refers to multiple directory traversal vulnerabilities found in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. These vulnerabilities allow an authenticated attacker to bypass permissions by making a crafted HTTP request. Specifically, a vulnerability lies within the `adddir_name` POST parameter, enabling an attacker to potentially access unintended directories and manipulate files.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.