CVE-2024-39763: Command Injection
Multiple OS command injection vulnerabilities exist in the internet.cgi setaddrouting() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists in the gateway POST parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39763?
CVE-2024-39763 is considered a high severity vulnerability due to the potential for arbitrary command execution.
How do I fix CVE-2024-39763?
To fix CVE-2024-39763, update the Wavlink AC3000 M33A8 device firmware to the latest available version provided by the vendor.
What are the potential consequences of exploiting CVE-2024-39763?
Exploiting CVE-2024-39763 could allow an attacker to execute arbitrary commands on the affected device, potentially compromising its security.
How is CVE-2024-39763 exploited?
CVE-2024-39763 can be exploited by sending specially crafted HTTP requests to the affected functionality of the device.
Who is affected by CVE-2024-39763?
CVE-2024-39763 affects users of the Wavlink AC3000 M33A8 model running the specified firmware version.