PT-2024-31141 · Unknown · Wayos Fbm-291W

Published 2024-09-04 · Updated 2024-09-05 · CVE-2024-44383

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WAYOS FBM-291W version 19.09.11

Description The issue is related to Command Execution via msp info htm. This vulnerability occurs through the "msp info htm" endpoint, allowing for command execution.

Recommendations For WAYOS FBM-291W version 19.09.11, as a temporary workaround, consider restricting access to the msp info htm endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2024-44383

Affected Products

Wayos Fbm-291W

References · 7

• 🔥 https://github.com/GroundCTL2MajorTom/pocs/blob/main/wayos_%20FBM_291W.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-44383 · Security Note
• https://osv.dev/vulnerability/CVE-2024-44383 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1831340568187674889 · Twitter Post
• https://t.me/cvenotify/93183 · Telegram Post
• https://t.me/cvedetector/4786 · Telegram Post
• https://twitter.com/CVEnew/status/1831322967512342746 · Twitter Post