CVE-2024-52963
CVSS 3.1 Score 3.7 of 10 (low)
Details
Published Jan 14, 2025
CWE ID 787
Summary
CVE-2024-21797 is a critical command execution vulnerability affecting the set_TR069() functionality within the adm.cgi file of Wavlink AC3000 M33A8.V5030.210505. Maliciously crafted HTTP requests can exploit this issue, granting attackers the ability to execute arbitrary commands on the targeted device. Successful exploitation of this vulnerability requires authenticated access to the affected system, posing a significant risk to organizations and individuals using this specific Wavlink model.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.