CVE-2024-11659

A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/network/diagiperf. The manipulation of the argument iperf leads to command injection. The attack may be...

CVE-2024-11659

creationtimestamp| type| source ---|---|--- 2024-11-25 06:42:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113542230223561393...

CVE-2024-11659 EnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_iperf command injection

A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/network/diagiperf. The manipulation of the argument iperf leads to command injection. The attack may be...

CVE-2024-11659

The CVE-2024-11659 issue affects EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT (firmware up to 2024-11-18). The root cause is an input manipulation vulnerability in the /admin/network/diag_iperf endpoint, where altering the iperf argument enables command injection. This can be triggered remotely ...