CVE-2024-44678

CVSS 8 HIGHEPSS 1.3%CWE-78

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8EPSS 1.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

25 Sep 2024Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Gigastone TR1 Travel Router R101 v1.0.2 is vulnerable to Command Injection. This allows an authenticated attacker to execute arbitrary commands on the device by sending a crafted HTTP request to the ssid parameter in the request.

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

n/a · n/a

References

https://www.bridewell.com/insights/blogs/detail/cve-2024-44678-identified-vulnerability-in-gigastone-wi-fi-range-extenders https://www.newegg.com/gigastone-tr1/p/0E6-008K-00004