VULNERABILITY INTELLIGENCE

CVE-2024-37023

CVSS score9.1 CRITICAL
EPSS probability1.26%
CISA KEVNot currently listed
Published2024-08-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Description

Multiple OS command injection vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an authenticated remote attacker to execute arbitrary OS commands via various endpoint parameters.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-77

Primary references