CVE-2024-30973

An issue in V-SOL G/EPON ONU HG323AC-B with firmware version V2.0.08-210715 allows an attacker to execute arbtirary code and obtain sensitive information via crafted POST request to /boaform/getASPdata/formFirewall, /boaform/getASPdata/formAcc...

CVE-2024-30973

CVE-2024-30973 affects V-SOL G/EPON ONU HG323AC-B (firmware V2.0.08-210715). A crafted POST to /boaform/getASPdata/formFirewall or /boaform/getASPdata/formAcc can allow arbitrary code execution and access to sensitive data. A workaround from PT-Security recommends disabling the two API endpoints ...