CVE-2024-11651 EnGenius ENH1350EXT/ENS500-AC/ENS620EXT wifi_schedule command injection

A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. It has been classified as critical. Affected is an unknown function of the file /admin/network/wifischedule. The manipulation of the argument wifischeduledayem5 leads to command injection. It is possible to...

CVE-2024-11651

The CVE-2024-11651 vulnerability affects EnGenius ENH1350EXT, ENS500-AC, and ENS620EXT (firmware up to 20241118). Affected is an unknown function in /admin/network/wifi_schedule; manipulating wifi_schedule_day_em_5 leads to remote command injection. Public exploit exists; vendor did not respond t...