CVE-2024-4999 Ligowave Unity/Pro/Mimo/APC Arbitrary Command Injection

2024-05-1612:14:51

CWE-77

ONEKEY

raw.githubusercontent.com

ligowave

web-based management

remote attacker

arbitrary commands

elevated privileges

unity

pro

mimo

apc

cve-2024-4999

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

JSON

A vulnerability in the web-based management interface of multiple Ligowave devices could allow an authenticated remote attacker to execute arbitrary commands with elevated privileges.This issue affects UNITY: through 6.95-2; PRO: through 6.95-1.Rt3883; MIMO: through 6.95-1.Rt2880; APC Propeller: through 2-5.95-4.Rt3352.