CVE-2024-48895: OS Command Injection
Published Nov 20, 2024
·Updated
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote authenticated attacker may execute an arbitrary OS command.
Affected Software
1 affected component
Rakuten Turbo 5G firmware<V1.3.18
Event History
Nov 20, 2024
CVE Published
via MITRE·07:30 AM
Data Sourced
via MITRE·07:30 AM
DescriptionSeverity
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-48895?
CVE-2024-48895 is considered a high severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2024-48895?
To mitigate CVE-2024-48895, upgrade to Rakuten Turbo 5G firmware version V1.3.19 or later.
3
Who is affected by CVE-2024-48895?
CVE-2024-48895 affects users of Rakuten Turbo 5G firmware version V1.3.18 and earlier.
4
What type of vulnerability is CVE-2024-48895?
CVE-2024-48895 is an OS command injection vulnerability that allows attackers to execute arbitrary commands.
5
Can CVE-2024-48895 be exploited remotely?
Yes, CVE-2024-48895 can be exploited remotely by an authenticated attacker.