CVE-2024-31976

EnGenius EWS356-FIR 1.1.30 and earlier devices allow a remote attacker to execute arbitrary OS commands via the Controller connectivity parameter...

CVE-2024-31976

EnGenius EWS356-FIR 1.1.30 and earlier devices allow a remote attacker to execute arbitrary OS commands via the Controller connectivity parameter...

CVE-2024-31976

creationtimestamp| type| source ---|---|--- 2024-11-27 16:39:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113555901407037805...

CVE-2024-31976

The EnGenius EWS356-FIR wireless access point, running version 1.1.30 and earlier , is susceptible to a vulnerability that allows a remote attacker to execute arbitrary OS commands . This is caused by the improper neutralization of special elements used in an OS command within the Controller conn...