CVE-2024-47944
CVSS 3.1 Score 6.8 of 10 (medium)
Details
Published Oct 15, 2024
CWE ID 1299
Summary
CVE-2024-47944 is a newly identified cybersecurity vulnerability that allows an attacker to execute unauthenticated code on a device. The vulnerability exists in the firmware upgrade function, which directly executes .patch files on a USB stick without requiring any authentication in the admin interface. This weakness puts devices at risk of being compromised through seemingly harmless upgrade files, making it essential for manufacturers to address this issue promptly.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.