Lucene search

K
nvd[email protected]NVD:CVE-2024-7029
HistoryAug 02, 2024 - 3:16 p.m.

CVE-2024-7029

2024-08-0215:16:37
CWE-77
web.nvd.nist.gov
9
commands injection
network
authentication

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.338

Percentile

97.1%

Commands can be injected over the network and executed without authentication.

Affected configurations

Nvd
Node
avtechavm1203_firmwareRangefullimg-1023-1007-1011-1009
AND
avtechavm1203Match-
VendorProductVersionCPE
avtechavm1203_firmware*cpe:2.3:o:avtech:avm1203_firmware:*:*:*:*:*:*:*:*
avtechavm1203-cpe:2.3:h:avtech:avm1203:-:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.338

Percentile

97.1%