CVE-2024-11983
Billion Electric router - OS Command Injection
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 7.2EPSS 1.1%KEV nãoPoC —Patch —
Ciclo de vida
29 nov 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Certain models of routers from Billion Electric has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject arbitrary system commands into a specific SSH function and execute them on the device.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Billion Electric · M100Billion Electric · M120NBillion Electric · M150Billion Electric · M500¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →