CVE-2024-41153CWE-78

Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands

High · published October 29, 2024

CVSS v3.1
7.2
EPSS
2%
Percentile
75.7
In the wild
Unconfirmed
What it is

Command injection vulnerability in the Edge Computing UI for the

TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the

web UI can execute commands on the device with root privileges,

far more extensive than what the write privilege intends.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01606 · 75.7th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2024-10-29T12:30Z
EPSS history
Timeline
  • 29 OCT 12:30Z
    Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands
    cvelistv5