Command Injection in Vonets products - CVE-2024-37023
Published: August 2, 2024
Vulnerability identifier: #VU95158
CSH Severity: Low
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-37023
CWE-ID: CWE-77
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to execute arbitrary commands on the target system.
The vulnerability exists due to improper input validation. A remote administrator can pass specially crafted data to the application and execute arbitrary commands on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
VAR1200-H
VAP11G-300
VAR11N-300
VAP11N-300
VAP11S
VAP11S-5G
VAP11G
VBG1200
VAP11G-500S
VAP11G-500
VAP11AC
VAR600-H
VGA-1000
VAR1200-L
VAP11G-300
VAR11N-300
VAP11N-300
VAP11S
VAP11S-5G
VAP11G
VBG1200
VAP11G-500S
VAP11G-500
VAP11AC
VAR600-H
VGA-1000
VAR1200-L
How to mitigate CVE-2024-37023
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.