CVE-2024-54082

CVSS 3.0 Score 7.2 of 10 (high)

Details

Published Dec 23, 2024
CWE ID 78

Summary

CVE-2024-54082 is a critical vulnerability affecting both the home 5G HR02 and Wi-Fi STATION SH-54C devices. The issue lies in their configuration restore function, which contains an OS command injection flaw. An attacker, with administrative access, can exploit this vulnerability to execute arbitrary OS commands with root privileges, posing a significant security risk. Successful exploitation could result in unauthorized system modifications or data theft. Users are encouraged to apply the necessary patches or updates as soon as they become available to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share