CVE-2024-39764: Command Injection
Multiple OS command injection vulnerabilities exist in the internet.cgi setaddrouting() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists in the dest POST parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39764?
CVE-2024-39764 is considered a high severity vulnerability due to its potential for arbitrary command execution.
How do I fix CVE-2024-39764?
To fix CVE-2024-39764, it is recommended to update the Wavlink AC3000 M33A8 firmware to the latest version provided by the vendor.
What type of vulnerability is CVE-2024-39764?
CVE-2024-39764 is categorized as an OS command injection vulnerability.
Who is affected by CVE-2024-39764?
CVE-2024-39764 specifically affects the Wavlink AC3000 M33A8 version V5030.210505.
How can an attacker exploit CVE-2024-39764?
An attacker can exploit CVE-2024-39764 by sending specially crafted authenticated HTTP requests to the affected device.