CVE-2024-5035
May 27, 2024, 8:15 a.m.
None
No Score
Description
The affected device expose a network service called "rftest" that is vulnerable to unauthenticated command injection on ports TCP/8888, TCP/8889, and TCP/8890. By successfully exploiting this flaw, remote unauthenticated attacker can gain arbitrary command execution on the device with elevated privileges.This issue affects Archer C4500X: through 1_1.1.6.
Product(s) Impacted
| Product | Versions |
|---|---|
| Archer C4500X |
|
Weaknesses
Tags
Date
- Published: May 27, 2024, 8:15 a.m.
- Last Modified: May 27, 2024, 8:15 a.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
research@onekey.com
*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.