PT-2024-33111
CVE-2024-48440
·
Published
2024-10-24
·
Updated
2024-10-25
Description by
CVSS 3.1
8.8
HighMetricsAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Shenzhen Tuoshi Network Communications Co.,Ltd 5G CPE Router NR500-EA RG500UEAABxCOMSLIC version 3.2.2543.12.18
Description
A command injection issue was found in the component at command.asp.
Recommendations
For version 3.2.2543.12.18, consider restricting access to the at command.asp component to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾