PT-2024-31804 · Faraday · Faraday Gm828X+1

·

CVE-2024-4584

·

Published

2024-05-07

·

Updated

2025-05-12

CVSS v2.0

5.0

Medium

VectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Faraday GM8181 and GM828x up to 20240429
Description: A problematic issue has been found, affecting some unknown functionality of the file /command port.ini. This leads to information disclosure and can be exploited remotely. The issue has been publicly disclosed.
Recommendations: For Faraday GM8181 and GM828x up to 20240429, consider restricting access to the /command port.ini file as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-4584

Affected Products

Faraday Gm8181
Faraday Gm828X