What’s Vulnerable › Vulnerabilities
CVE-2024-24301
- Severity: high (CVSS 8.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.1% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2024-02-14 · updated 2026-06-17
- Weakness: CWE-77
Description
Command Injection vulnerability discovered in 4ipnet EAP-767 device v3.42.00 within the web interface of the device allows attackers with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges.
Affected products
- 4Ipnet Eap-767 Firmware: 3.42.00
References
Get alerted when CVE-2024-24301 or the next vulnerability affects your stack