VULNERABILITY INTELLIGENCE

CVE-2024-24301

CVSS score8.8 HIGH

EPSS probability2.10%

CISA KEVNot currently listed

Published2024-02-14

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Command Injection vulnerability discovered in 4ipnet EAP-767 device v3.42.00 within the web interface of the device allows attackers with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges.

Weakness classification

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-77

Primary references

cve@mitre.org — Exploit, Mitigation, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mitigation, Third Party Advisory