CVE-2024-12856

🗓️ 27 Dec 2024 16:03:04Reported by VulnCheckType

cve🔗 web.nvd.nist.gov📰️ 12 Media mentions👁 311 Views

Four-Faith routers vulnerable to OS command injection with default credentials issues in firmware version 2.0.

Reporter	Title	Published	Views	Family All 22
GithubExploit	Exploit for CVE-2024-12856	11 Jan 202518:14	–	githubexploit
BDU FSTEC	Four-Faith F3x24/F3x36 Command Execution	13 Jan 202500:00	–	bdu_fstec
Circl	CVE-2024-12856	27 Dec 202416:15	–	circl
CNNVD	Four-Faith F3x24 and Four-Faith F3x36 security vulnerabilities	27 Dec 202400:00	–	cnnvd
Cvelist	CVE-2024-12856 Four-Faith Industrial Router adjust_sys_time OS Command Injection	27 Dec 202416:03	–	cvelist
HackRead	Critical Flaw Exposes Four-Faith Routers to Remote Exploitation	30 Dec 202406:13	–	hackread
Kitploit	CVE-2024-12856	31 Oct 202618:05	–	kitploit
NVD	CVE-2024-12856	27 Dec 202416:15	–	nvd
osv_cve	CVE-2024-12856	27 Dec 202416:15	–	osv_cve
Positive Technologies	PT-2024-10029	20 Dec 202400:00	–	ptsecurity

NVD

Vulners

CNA

Node

AND

four-faith f3x36_firmwareMatch2.0

four-faith f3x36Match-

Node

AND

four-faith f3x24_firmwareMatch2.0

four-faith f3x24Match-

[
  {
    "defaultStatus": "unknown",
    "product": "F3x24",
    "vendor": "Four-Faith",
    "versions": [
      {
        "status": "affected",
        "version": "2.0"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "product": "F3x36",
    "vendor": "Four-Faith",
    "versions": [
      {
        "status": "affected",
        "version": "2.0"
      }
    ]
  }
]

Source	Link
vulncheck	www.vulncheck.com/advisories/four-faith-time
ducklingstudio	www.ducklingstudio.blog.fc2.com/blog-entry-392.html
vulncheck	www.vulncheck.com/blog/four-faith-cve-2024-12856