CVE-2020-24849

A remote code execution vulnerability is identified in FruityWifi through 2.4

published November 5, 2020

CVSS
—
EPSS
3%
Percentile
88.5
In the wild
Unconfirmed
What it is

A remote code execution vulnerability is identified in FruityWifi through 2.4. Due to improperly escaped shell metacharacters obtained from the POST request at the page_config_adv.php page, it is possible to perform remote code execution by an authenticated attacker. This is similar to CVE-2018-17317.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03307 · 88.5th percentile
Published
2020-11-05T14:19Z
EPSS history
Timeline
  • 05 NOV 14:19Z
    A remote code execution vulnerability is identified in FruityWifi through 2.4
    cvelistv5