CVE-2024-39788
CVSS 3.1 Score 9.1 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 15
Summary
CVE-2024-39788 is a newly discovered vulnerability affecting the nas.cgi set_ftp_cfg() functionality in Wavlink AC3000 M33A8 V5030.210505. This issue involves multiple external configuration control vulnerabilities that can be exploited through a specially crafted HTTP request. An attacker with authenticated access can bypass permissions and manipulate the system's configuration, specifically the `ftp_name` POST parameter, leading to potential security risks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.