CVE-2024-44414

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-10-11 · updated 2026-06-17
Weakness: CWE-94

Description

A vulnerability was discovered in FBM_292W-21.03.10V, which has been classified as critical. This issue affects the sub_4901E0 function in the msp_info.htm file. Manipulation of the path parameter can lead to command injection.

Affected products

WAYOS Fbm 292W Firmware: 21.03.10

References

https://github.com/IotChan/cve/blob/main/wayos/FBM_292W/CVE-2024-44414
https://github.com/IotChan/cve/blob/main/wayos/FBM_292W/wayos%20FBM_292W.md

Get alerted when CVE-2024-44414 or the next vulnerability affects your stack