CVE-2024-11657

🗓️ 25 Nov 2024 05:31:25Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 53 Views🌐 WEB

Vulnerability in EnGenius ENH1350EXT/ENS500-AC/ENS620EXT allows remote command injection via diag_nslooku

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2024-11657	25 Nov 202405:38	–	circl
CNNVD	EnGenius多款产品注入漏洞	25 Nov 202400:00	–	cnnvd
Cvelist	CVE-2024-11657 EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_nslookup command injection	25 Nov 202405:31	–	cvelist
EUVD	EUVD-2024-33935	3 Oct 202520:07	–	euvd
NVD	CVE-2024-11657	25 Nov 202406:15	–	nvd
RedhatCVE	CVE-2024-11657	23 May 202507:51	–	redhatcve
Vulnrichment	CVE-2024-11657 EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_nslookup command injection	25 Nov 202405:31	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

engeniustech enh1350ext_firmware

AND

engeniustech enh1350extMatch-

Node

engeniustech ens620ext_firmware

AND

engeniustech ens620extMatch-

Node

engeniustech ens500-ac_firmware

AND

engeniustech ens500-acMatch-

[
  {
    "vendor": "EnGenius",
    "product": "ENH1350EXT",
    "versions": [
      {
        "version": "20241118",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "EnGenius",
    "product": "ENS500-AC",
    "versions": [
      {
        "version": "20241118",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "EnGenius",
    "product": "ENS620EXT",
    "versions": [
      {
        "version": "20241118",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
k9u7kv33ub	www.k9u7kv33ub.feishu.cn/wiki/RURswTkepiuKCzkGMd2cA1M2nNc
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
diag_nslookup	query param	/admin/network/diag_nslookup	Command injection via manipulation of diag_nslookup parameter in /admin/network/diag_nslookup leading to remote code execution.	CWE-74, CWE-77

12 Feb 2025 15:33Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.14.7 - 7.2

CVSS 45.1

CVSS 25.8

CVSS 34.7

EPSS0.00954

SSVC