CVE-2024-39781

Multiple OS command injection vulnerabilities exist in the adm.cgi schreboot functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command...

CVE-2024-39781

creationtimestamp| type| source ---|---|--- 2025-01-14 15:18:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpkcvvmku2r 2025-01-14 15:48:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfplyqkpcs2w 2025-01-14 15:49:56+00:00| seen|...

CVE-2024-39781

CVE-2024-39781 affects Wavlink AC3000 M33A8.V5030.210505; the adm.cgi sch_reboot() function is vulnerable to OS command injection via restart_hour, restart_min, or restart_week parameters. The exploit can place a crafted cron entry into SCH_Reboot that writes to the device’s crontab (adm2860 user...

CVE-2024-39781

Multiple OS command injection vulnerabilities exist in the adm.cgi schreboot functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command...