CVE-2024-45827

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-45827
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, a network-adjacent authenticated attacker may execute an arbitrary OS command.

8.0 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.1 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://jvn.jp/en/vu/JVNVU90676195/
Configurations

No configuration.

History

12 Nov 2024, 13:55

Type Values Removed Values Added
Summary
  • (es) Existe un problema de neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo ('Inyección de comando del sistema operativo') en Mesh Wi-Fi router RP562B firmware versión v1.0.2 y anteriores. Si se aprovecha esta vulnerabilidad, un atacante autenticado adyacente a la red puede ejecutar un comando arbitrario del sistema operativo.

12 Nov 2024, 06:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-12 06:15

Updated : 2024-11-12 13:55

NVD link : CVE-2024-45827

Mitre link : CVE-2024-45827

CVE.ORG link : CVE-2024-45827

JSON object : View

Products Affected

No product.

CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')