Description
A Command Injection vulnerability in Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, authenticated attackers to execute arbitrary code by injecting shell commands into the name of the Vilo device.
Critical · 9.1
CVE-2024-40089
EUVD-2024-38411GHSA-rhh2-57h6-gv96
A Command Injection vulnerability in Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, authenticated attackers to execute arbitrary code …
Published Oct 21, 2024 · Updated Jul 5, 2026 · Assigned by mitre