CVE-2024-41643: Code Injection
Published Mar 26, 2025
·Updated
An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component.
Affected Software
1 affected component
Arris NVG443B
Event History
Mar 26, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-41643?
CVE-2024-41643 is considered a high severity vulnerability due to the potential for arbitrary code execution by a physically proximate attacker.
2
How do I fix CVE-2024-41643?
To fix CVE-2024-41643, update the Arris NVG443B to the latest firmware version that addresses this vulnerability.
3
What type of attack does CVE-2024-41643 involve?
CVE-2024-41643 involves a physical proximity attack where an attacker can exploit the cshell login component.
4
Can CVE-2024-41643 be exploited remotely?
No, CVE-2024-41643 requires physical access to the device to exploit the vulnerability.
5
Which devices are affected by CVE-2024-41643?
CVE-2024-41643 specifically affects the Arris NVG443B routers running the vulnerable firmware version.