CVE-2024-50372: OS Command Injection
A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The vulnerability can be exploited by remote unauthenticated users capable of interacting with the default "edgserver" service enabled on the access point and malicious commands are executed with root privileges. No authentication is enabled on the service and the source of the vulnerability resides in processing code associated to the "backupconfigtoutility" operation.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50372?
CVE-2024-50372 is classified as a medium severity vulnerability due to its potential for OS command injection.
How do I fix CVE-2024-50372?
To fix CVE-2024-50372, update the affected devices to versions higher than the specified vulnerable versions: EKI-6333AC-2G and EKI-6333AC-2GD to greater than 1.6.3, and EKI-6333AC-1GPO to greater than 1.2.1.
Which Advantech devices are affected by CVE-2024-50372?
CVE-2024-50372 affects the Advantech devices: EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO.
What type of vulnerability is CVE-2024-50372?
CVE-2024-50372 is an OS command injection vulnerability resulting from improper neutralization of special elements.
Can CVE-2024-50372 be remotely exploited?
Yes, CVE-2024-50372 can potentially be exploited remotely if the conditions are met for command injection.