CVE-2024-12856

🗓️ 27 Dec 2024 16:03:04Reported by VulnCheckType

cve🔗 web.nvd.nist.gov📰️ 12 Media mentions👁 225 Views🌐 WEB

Four-Faith routers vulnerable to OS command injection with default credentials issues in firmware version 2.0.

Reporter	Title	Published	Views	Family All 18
GithubExploit	Exploit for CVE-2024-12856	11 Jan 202518:14	–	githubexploit
Circl	CVE-2024-12856	27 Dec 202416:15	–	circl
CNNVD	Four-Faith F3x24和Four-Faith F3x36 安全漏洞	27 Dec 202400:00	–	cnnvd
Cvelist	CVE-2024-12856 Four-Faith Industrial Router adjust_sys_time OS Command Injection	27 Dec 202416:03	–	cvelist
HackRead	Critical Flaw Exposes Four-Faith Routers to Remote Exploitation	30 Dec 202406:13	–	hackread
NVD	CVE-2024-12856	27 Dec 202416:15	–	nvd
OSV	CVE-2024-12856	27 Dec 202416:15	–	osv
Positive Technologies	PT-2024-10029	20 Dec 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-12856	5 Feb 202510:28	–	redhatcve
Saint	Four-Faith Router adjust_sys_time command injection	3 Jan 202500:00	–	saint

NVD

Vulners

CNA

Node

four-faith f3x36_firmwareMatch2.0

AND

four-faith f3x36Match-

Node

four-faith f3x24_firmwareMatch2.0

AND

four-faith f3x24Match-

[
  {
    "defaultStatus": "unknown",
    "product": "F3x24",
    "vendor": "Four-Faith",
    "versions": [
      {
        "status": "affected",
        "version": "2.0"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "product": "F3x36",
    "vendor": "Four-Faith",
    "versions": [
      {
        "status": "affected",
        "version": "2.0"
      }
    ]
  }
]

Source	Link
ducklingstudio	www.ducklingstudio.blog.fc2.com/blog-entry-392.html
vulncheck	www.vulncheck.com/advisories/four-faith-time
vulncheck	www.vulncheck.com/blog/four-faith-cve-2024-12856