Skip to content
OpenAdvisories
High · 8.0 CVE-2024-45827 EUVD-2024-41621GHSA-hc45-qqvj-wc2j

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Mesh Wi-Fi router RP562B firmwar…

Published Nov 12, 2024 · Updated Nov 12, 2024 · Assigned by jpcert

Description

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, a network-adjacent authenticated attacker may execute an arbitrary OS command.

Affected products

VendorProductAffectedFixed
SoftBank Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier —

References