What’s Vulnerable › Vulnerabilities

CVE-2024-37855

• Severity: high (CVSS 8.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-25 · updated 2026-06-17
• Weakness: CWE-94

Description

An issue in Nepstech Wifi Router xpon (terminal) NTPL-Xpon1GFEVN, hardware verstion 1.0 firmware 2.0.1 allows a remote attacker to execute arbitrary code via the router's Telnet port 2345 without requiring authentication credentials.

Affected products

• Nepstech Ntpl-Xpon1Gfevn Firmware: 2.0.1

References

• https://github.com/sudo-subho/nepstech-xpon-router-rce
• https://github.com/sudo-subho/nepstech-xpon-router-rce

Get alerted when CVE-2024-37855 or the next vulnerability affects your stack