PT-2025-1004 · Unknown · 501 Wireless Client Bridge

Hosein Vita

·

Published

2025-01-07

·

Updated

2025-01-13

·

CVE-2024-54006

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: 501 Wireless Client Bridge (affected versions not specified)
Description: The issue concerns multiple command injection vulnerabilities in the web interface of the 501 Wireless Client Bridge. These vulnerabilities could lead to authenticated remote command execution, allowing an attacker to execute arbitrary commands as a privileged user on the underlying operating system. The exploitation requires administrative authentication credentials on the host system.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2025-00109
CVE-2024-54006

Affected Products

501 Wireless Client Bridge