CVE-2024-39273: Critical severity wavlink jetstream ac3000 vulnerability
A firmware update vulnerability exists in the fwcheck.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary firmware update. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39273?
CVE-2024-39273 is considered a high-severity vulnerability due to the potential for arbitrary firmware updates via a man-in-the-middle attack.
How do I fix CVE-2024-39273?
To mitigate CVE-2024-39273, ensure that you apply the latest firmware updates provided by Wavlink and configure your network to prevent man-in-the-middle attacks.
Who is affected by CVE-2024-39273?
CVE-2024-39273 affects Wavlink AC3000 M33A8 devices using the specific firmware version V5030.210505.
What kind of attack can exploit CVE-2024-39273?
CVE-2024-39273 can be exploited through a specially crafted HTTP request during a man-in-the-middle attack.
What functionality is vulnerable in CVE-2024-39273?
CVE-2024-39273 involves a vulnerability in the fw_check.sh functionality that can allow unauthorized firmware updates.