CVE-2024-7579

Summary

CVE-2024-7579 is a newly disclosed critical vulnerability affecting Alien Technology ALR-F800 up to version 19.10.24.00. The File Name Handler's upgrades.cgi script, specifically its popen function, contains a command injection flaw. An attacker can exploit this vulnerability by manipulating the argument uploadedFile, leading to the execution of os commands. The exploit can be launched remotely, making this a significant security concern. Regrettably, the vulnerability has been made public, increasing the risk of potential attacks. Despite early disclosure to the vendor, no response or patch has been provided.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.