PT-2024-24546 · Unknown · Rg-Rsr10-01G-T(Wa)-S

Swind1Er · Published 2024-04-22 · Updated 2024-11-22 · CVE-2024-32394

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RG-RSR10-01G-T(WA)-S RSR 3.0(1)B9P2 RSR10-01G-TW-S 07150910

Description The issue allows a remote attacker to execute arbitrary code via a crafted HTTP request.

Recommendations For RG-RSR10-01G-T(WA)-S RSR 3.0(1)B9P2 RSR10-01G-TW-S 07150910, consider restricting access to the HTTP request functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-32394

Affected Products

Rg-Rsr10-01G-T(Wa)-S

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-32394 · Security Note
• https://t.me/cvenotify/77752 · Telegram Post
• https://t.me/cvenotify/77702 · Telegram Post
• https://gist.github.com/Swind1er/7aad5c28e5bdc91d73fa7489b7250c94 · Note
• https://t.me/cvenotify/102360 · Telegram Post