1. Home
  2. CVE Database
  3. CVE-2024-22366
MEDIUM · 6.8

CVE-2024-22366

Active debug code exists in Yamaha wireless LAN access point devices. If a logged-in user who knows how to use the debug function accesses the device's management page, this function can be enabled by...

Vulnerability Description

Active debug code exists in Yamaha wireless LAN access point devices. If a logged-in user who knows how to use the debug function accesses the device's management page, this function can be enabled by performing specific operations. As a result, an arbitrary OS command may be executed and/or configuration settings of the device may be altered. Affected products and versions are as follows: WLX222 firmware Rev.24.00.03 and earlier, WLX413 firmware Rev.22.00.05 and earlier, WLX212 firmware Rev.21.00.12 and earlier, WLX313 firmware Rev.18.00.12 and earlier, and WLX202 firmware Rev.16.00.18 and earlier.

CVSS Score

6.8

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
YamahaWlx222 Firmware< 24.00.04
YamahaWlx222-
YamahaWlx413 Firmware< 22.00.06
YamahaWlx413-
YamahaWlx212 Firmware< 21.00.13
YamahaWlx212-
YamahaWlx313 Firmware< 18.00.13
YamahaWlx313-
YamahaWlx202 Firmware< 16.00.19
YamahaWlx202-

Related Weaknesses (CWE)

CWE-78

References

FAQ

What is CVE-2024-22366?

CVE-2024-22366 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Active debug code exists in Yamaha wireless LAN access point devices. If a logged-in user who knows how to use the debug function accesses the device's management page, this function can be enabled by...

How severe is CVE-2024-22366?

CVE-2024-22366 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-22366?

Check the references section above for vendor advisories and patch information. Affected products include: Yamaha Wlx222 Firmware, Yamaha Wlx222, Yamaha Wlx413 Firmware, Yamaha Wlx413, Yamaha Wlx212 Firmware.