PT-2024-24913 · Unknown · Skybridge Basic Mb-A130+1

Chuya Hayakawa

·

Published

2024-05-31

·

Updated

2024-07-03

·

CVE-2024-32850

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SkyBridge MB-A100/MB-A110 versions 4.2.2 and earlier SkyBridge BASIC MB-A130 versions 1.5.5 and earlier
Description The issue is related to improper neutralization of special elements used in a command, also known as 'Command Injection'. This allows an attacker with access to the product to execute an arbitrary command or login to the product with administrator privilege if the remote monitoring and control function is enabled. Over 14,000 results have been found, indicating a significant number of potentially affected devices.
Recommendations For SkyBridge MB-A100/MB-A110 versions 4.2.2 and earlier, consider disabling the remote monitoring and control function until a patch is available. For SkyBridge BASIC MB-A130 versions 1.5.5 and earlier, consider disabling the remote monitoring and control function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2024-32850

Affected Products

Skybridge Basic Mb-A130
Skybridge Mb-A100/Mb-A110