CVE-2024-9977: MitraStar GPT-2541GNAC Firewall Settings Page settings-firewall.cgi os command injection
A vulnerability, which was classified as critical, was found in MitraStar GPT-2541GNAC BRg5.61.11(WVK.0)b26. Affected is an unknown function of the file /cgi-bin/settings-firewall.cgi of the component Firewall Settings Page. The manipulation of the argument SrcInterface leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. We tried to contact the vendor early about the disclosure but the official mail address was not working properly.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9977?
CVE-2024-9977 is classified as a critical vulnerability.
What component is affected by CVE-2024-9977?
CVE-2024-9977 affects the Firewall Settings Page component of MitraStar GPT-2541GNAC.
How do I fix CVE-2024-9977?
To fix CVE-2024-9977, apply the latest firmware update provided by MitraStar for the GPT-2541GNAC.
What type of attack can CVE-2024-9977 lead to?
CVE-2024-9977 can lead to unauthorized access due to manipulation of the SrcInterface argument.
Is there a workaround for CVE-2024-9977?
Currently, the best workaround for CVE-2024-9977 is to disable remote management features on the device.