CVE-2024-4999

2024-05-1613:15:48

CWE-77

[email protected]

web.nvd.nist.gov

vulnerability

remote

attackers

execution

commands

ligowave

devices

web-based interface

elevated privileges

nvd

unity

pro

mimo

apc propeller

cve-2024-4999

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

JSON

A vulnerability in the web-based management interface of multiple Ligowave devices could allow an authenticated remote attacker to execute arbitrary commands with elevated privileges.This issue affects UNITY: through 6.95-2; PRO: through 6.95-1.Rt3883; MIMO: through 6.95-1.Rt2880; APC Propeller: through 2-5.95-4.Rt3352.

References

onekey.com/blog/security-advisory-remote-code-execution-in-ligowave-devices/