CVE-2024-5195: Arris VAP2500 diag_s.php command injection
A vulnerability was found in Arris VAP2500 08.50. It has been rated as critical. Affected by this issue is some unknown functionality of the file /diags.php. The manipulation of the argument customerinfo leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265832.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-5195?
CVE-2024-5195 has been rated as critical.
What does CVE-2024-5195 affect?
CVE-2024-5195 affects the Arris VAP2500 device, specifically an unknown functionality of the file /diag_s.php.
What type of attack is possible with CVE-2024-5195?
CVE-2024-5195 allows for remote command injection through manipulation of the customer_info argument.
How can I mitigate the risks of CVE-2024-5195?
To mitigate CVE-2024-5195, it is important to update the Arris VAP2500 to a patched version as soon as available.
Is CVE-2024-5195 exploitable remotely?
Yes, CVE-2024-5195 can be exploited remotely.