CVE-2024-50360
CVSS 3.1 Score 7.2 of 10 (high)
Details
Summary
CVE-2024-50360 is a newly discovered vulnerability affecting select devices manufactured by Advantech. Affected models include the EKI-6333AC-2G (versions <= 1.6.3), EKI-6333AC-2GD (versions <= v1.6.3), and EKI-6333AC-1GPO (versions <= v1.2.1). This vulnerability is categorized as CWE-78, or OS Command Injection. The root cause stems from the "snmp_apply" API, which combines multiple unsanitized parameters into OS-level commands, posing a significant security risk. It is crucial that users of these devices update to the latest available versions to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.