CVE-2024-5785
CVSS 3.1 Score 8.0 of 10 (high)
Details
Summary
CVE-2024-5785 is a command injection vulnerability affecting the Comtrend router WLD71-T1_v2.0.201820, specifically the GRG-4280us version. This vulnerability allows an authenticated user to execute commands within the router by sending a POST request to the URL "/boaform/admin/formUserTracert". The vulnerability has a base severity rating of HIGH and a base score of 8.0, indicating its significant impact on confidentiality, integrity, and availability. The exploitability score is 2.1, suggesting that it is relatively easy for an attacker to exploit this vulnerability. Organizations using the affected products should take immediate action to remediate this vulnerability and ensure that their routers are updated with the latest firmware patches to prevent unauthorized access and potential damage to their network infrastructure.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions