CVE-2023-24046

Name of the Vulnerable Software and Affected Versions Connectize AC21000 G6 version 641.139.1.1256

Description An issue in the Connectize AC21000 G6 allows attackers to run arbitrary commands via a crafted string in the ping utility. The vulnerability is caused by weaknesses in the authorization procedure of the diagnostic ping function in the router's firmware. This can allow a remote attacker to execute arbitrary commands.

Recommendations For version 641.139.1.1256, consider disabling the ping utility until a patch is available to prevent exploitation. Restrict access to the device to minimize the risk of privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.