Description
The device directly executes .patch firmware upgrade files on a USB stick without any prior authentication in the admin interface. This leads to an unauthenticated code execution via the firmware upgrade function.
Related CPE's
Could not find any relations
References
Weaknesses
551230f0-3615-47bd-b7cc-93e92e730bbf
Secondary
CWE-1299
CVSS impact metrics
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
6.8 · Medium
Information
Source identifier
551230f0-3615-47bd-b7cc-93e92e730bbf
Vulnerability status
Awaiting analysis
Published
2024-10-15T07:15:03.580Z
1 year agoLast modified
2025-11-03T22:16:23.457Z
4 months ago