CVE-2024-31406

2024-04-2405:45:37

jpcert

www.cve.org

cve-2024-31406

network-adjacent

unauthenticated

unauthorized operations

roamwifi

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Active debug code vulnerability exists in RoamWiFi R10 prior to 4.8.45. If this vulnerability is exploited, a network-adjacent unauthenticated attacker with access to the device may perform unauthorized operations.

CNA Affected

[
  {
    "vendor": "RoamWiFi Technology Co., Ltd.",
    "product": "RoamWiFi R10",
    "versions": [
      {
        "version": "prior to 4.8.45",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN62737544/

www.roamwifi.hk/product.jsp