CVE-2024-39783: Command Injection
Multiple OS command injection vulnerabilities exist in the adm.cgi schreboot() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection vulnerability exists in the restartweek POST parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39783?
CVE-2024-39783 has a high severity rating due to its potential for arbitrary code execution.
How do I fix CVE-2024-39783?
To fix CVE-2024-39783, update the firmware of the Wavlink AC3000 M33A8 to the latest version that addresses the vulnerabilities.
What are the potential impacts of CVE-2024-39783?
The potential impacts of CVE-2024-39783 include unauthorized access and execution of arbitrary commands on the affected device.
Who is affected by CVE-2024-39783?
CVE-2024-39783 affects users of the Wavlink AC3000 M33A8 running firmware version V5030.210505.
What is the attack vector for CVE-2024-39783?
The attack vector for CVE-2024-39783 is through authenticated HTTP requests that exploit the sch_reboot() functionality in adm.cgi.