What’s Vulnerable › Vulnerabilities

CVE-2024-39209

• Severity: medium (CVSS 6.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-27 · updated 2026-06-17
• Weakness: CWE-94

Description

luci-app-sms-tool v1.9-6 was discovered to contain a command injection vulnerability via the score parameter.

Affected products

• Luci App Sms Tool: from v1.9.0 through v1.9.6

References

• https://gist.github.com/yanggao017/e392a633b8cee6f42c514b125860081c
• https://github.com/yanggao017/vuln/blob/main/luci-app-sms-tool.md
• https://gist.github.com/yanggao017/e392a633b8cee6f42c514b125860081c
• https://github.com/yanggao017/vuln/blob/main/luci-app-sms-tool.md

Get alerted when CVE-2024-39209 or the next vulnerability affects your stack