CVE-2024-5194: Arris VAP2500 assoc_table.php command injection
Published May 22, 2024
·Updated
A vulnerability was found in Arris VAP2500 08.50. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /assoctable.php. The manipulation of the argument id leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265831.
Affected Software
3 affected components
Arris VAP2500
All of the following
Arris Vap2500 Firmware=08.50
Arris VAP2500
Event History
May 22, 2024
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Apr 7, 58462
Event
via NVD·10:14 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-5194?
CVE-2024-5194 has been declared as critical.
2
What are the implications of exploiting CVE-2024-5194?
Exploiting CVE-2024-5194 can lead to remote command injection via manipulation of the id argument in /assoc_table.php.
3
Which devices are affected by CVE-2024-5194?
CVE-2024-5194 affects the Arris VAP2500.
4
How do I fix CVE-2024-5194?
To fix CVE-2024-5194, it is recommended to apply the latest firmware update provided by Arris.
5
Can CVE-2024-5194 be exploited remotely?
Yes, CVE-2024-5194 can be exploited remotely.