PT-2024-31740 · Unknown · Wi-Fi Station Sh-54C+2

Shuto Imai · Published 2024-12-23 · Updated 2025-05-26 · CVE-2024-45721

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: home 5G HR02 (affected versions not specified) Wi-Fi STATION SH-52B (affected versions not specified) Wi-Fi STATION SH-54C (affected versions not specified)

Description: The issue is an OS command injection vulnerability found in the HOST name configuration screen of the affected devices. This vulnerability allows an arbitrary OS command to be executed with root privilege by an administrative user.

Recommendations: For home 5G HR02, consider restricting access to the HOST name configuration screen until a patch is available. For Wi-Fi STATION SH-52B, avoid using the HOST name configuration screen with administrative privileges until the issue is resolved. For Wi-Fi STATION SH-54C, as a temporary workaround, consider disabling the HOST name configuration screen functionality until a fix is provided. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2024-45721

Affected Products

Wi-Fi Station Sh-52B

Wi-Fi Station Sh-54C

Home 5G Hr02

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2024-45721 · Security Note
• https://t.me/cvedetector/13523 · Telegram Post
• https://twitter.com/gbhackers_news/status/1871094807537553898 · Twitter Post
• https://twitter.com/The_Cyber_News/status/1871094718551220698 · Twitter Post
• https://k-tai.sharp.co.jp/support/info/info083.html · Note
• https://jvn.jp/en/jp/JVN61635834 · Note
• https://twitter.com/UndercodeNews/status/1927042780859081038 · Twitter Post
• https://twitter.com/CVEnew/status/1871018090219335688 · Twitter Post
• https://t.me/cvenotify/105265 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1871018667435053325 · Twitter Post