Skip to content
OpenAdvisories
High · 8.8 CVE-2024-24301 EUVD-2024-21723GHSA-3m2w-jxjv-4wfv

Command Injection vulnerability discovered in 4ipnet EAP-767 device v3.42.00 within the web interface of the device allows attackers with v…

Published Feb 14, 2024 · Updated Aug 27, 2024 · Assigned by mitre

Description

Command Injection vulnerability discovered in 4ipnet EAP-767 device v3.42.00 within the web interface of the device allows attackers with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges.

References