Active Debug Code in Yamaha Corporation products - CVE-2024-22366
Published: January 23, 2024
Vulnerability identifier: #VU85693
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-22366
CWE-ID: CWE-489
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to compromise the target system.
The vulnerability exists due to the active debug code issue. A remote administrator on the local network can access debug features that were accidentally exposed.
Affected software
WLX222
WLX413
WLX212
WLX313
WLX202
WLX413
WLX212
WLX313
WLX202
How to mitigate CVE-2024-22366
Install updates from vendor's website.
WLX222 - update to 24.00.04
WLX413 - update to 22.00.06
WLX212 - update to 21.00.13
WLX313 - update to 18.00.13
WLX202 - update to 16.00.19
WLX413 - update to 22.00.06
WLX212 - update to 21.00.13
WLX313 - update to 18.00.13
WLX202 - update to 16.00.19