CVE-2024-41692
July 26, 2024, 1:15 p.m.
None
No Score
Description
This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the root shell on the vulnerable system.
Successful exploitation of this vulnerability could allow the attacker to execute arbitrary commands with root privileges on the targeted system.
Product(s) Impacted
| Product | Versions |
|---|---|
| SyroTech SY-GPON-1110-WDONT Router |
|
Weaknesses
CWE-1191
On-Chip Debug and Test Interface With Improper Access Control
The chip does not implement or does not correctly perform access control to check whether users are authorized to access internal registers and test modes through the physical debug/test interface.
Tags
Date
- Published: July 26, 2024, 1:15 p.m.
- Last Modified: July 26, 2024, 1:15 p.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
vdisclose@cert-in.org.in
*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.