Vulnerability Description
Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one of the endpoints. In order to exploit this vulnerability, one has to have access to the administrative portal of the router.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Kaongroup | Ar2140 Firmware | >= 3.2.46, < 4.2.16 |
| Kaongroup | Ar2140 | - |
Related Weaknesses (CWE)
References
- https://cert.pl/en/posts/2024/08/CVE-2024-3659Third Party Advisory
- https://cert.pl/posts/2024/08/CVE-2024-3659Third Party Advisory
FAQ
What is CVE-2024-3659?
CVE-2024-3659 is a vulnerability with a CVSS score of 7.2 (HIGH). Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one of the endpoints. In order to exploit this vulnera...
How severe is CVE-2024-3659?
CVE-2024-3659 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-3659?
Check the references section above for vendor advisories and patch information. Affected products include: Kaongroup Ar2140 Firmware, Kaongroup Ar2140.