What’s Vulnerable › Vulnerabilities

CVE-2020-24848

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-10-23 · updated 2026-06-17
• Weakness: CWE-269

Description

FruityWifi through 2.4 has an unsafe Sudo configuration [(ALL : ALL) NOPASSWD: ALL]. This allows an attacker to perform a system-level (root) local privilege escalation, allowing an attacker to gain complete persistent access to the local system.

Affected products

• Fruitywifi Project Fruitywifi: through 2.4

References

• https://gist.github.com/harsh-bothra/5be73cfd53f1c5bea307c702ae83ff42
• https://github.com/xtr4nge/FruityWifi/issues/278
• https://gist.github.com/harsh-bothra/5be73cfd53f1c5bea307c702ae83ff42
• https://github.com/xtr4nge/FruityWifi/issues/278

Get alerted when CVE-2020-24848 or the next vulnerability affects your stack