CVE-2024-7578

Summary

CVE-2024-7578 is a newly disclosed critical vulnerability affecting Alien Technology's ALR-F800 up to version 19.10.24.00. The issue lies within an unknown function of the file /var/www/cmd.php, which can be exploited by manipulating the cmd argument. This leads to improper authorization, allowing for remote attacks. The vulnerability has been made public, increasing the risk of exploitation without a patch or mitigation from the vendor. Despite early notification, the vendor has not responded to the disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.