Description
EnGenius EWS356-FIT devices through 1.1.30 allow blind OS command injection. This allows an attacker to execute arbitrary OS commands via shell metacharacters to the Ping and Speed Test utilities.
Critical · 9.8
CVE-2024-36061
EUVD-2024-35863GHSA-v8h2-p73v-3whx
EnGenius EWS356-FIT devices through 1.1.30 allow blind OS command injection. This allows an attacker to execute arbitrary OS commands via s…
Published Nov 11, 2024 · Updated Nov 12, 2024 · Assigned by mitre