CVE-2024-44678

Gigastone TR1 Travel Router R101 v1.0.2 is vulnerable to Command Injection

High · published September 25, 2024

CVSS v3.1
8.0
EPSS
1%
Percentile
70.8
In the wild
Unconfirmed
What it is

Gigastone TR1 Travel Router R101 v1.0.2 is vulnerable to Command Injection. This allows an authenticated attacker to execute arbitrary commands on the device by sending a crafted HTTP request to the ssid parameter in the request.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01326 · 70.8th percentile
Published
2024-09-25T00:00Z
EPSS history
Timeline
  • 25 SEP 00:00Z
    Gigastone TR1 Travel Router R101 v1.0.2 is vulnerable to Command Injection
    cvelistv5