1. Home
  2. CVE Database
  3. CVE-2024-37023
CRITICAL · 9.1

CVE-2024-37023

Multiple OS command injection vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an authenticated remote attac...

Vulnerability Description

Multiple OS command injection vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an authenticated remote attacker to execute arbitrary OS commands via various endpoint parameters.

CVSS Score

9.1

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
VonetsVar1200-H Firmware<= 3.3.23.6.9
VonetsVar1200-H-
VonetsVar1200-L Firmware<= 3.3.23.6.9
VonetsVar1200-L-
VonetsVar600-H Firmware<= 3.3.23.6.9
VonetsVar600-H-
VonetsVap11Ac Firmware<= 3.3.23.6.9
VonetsVap11Ac-
VonetsVap11G-500S Firmware<= 3.3.23.6.9
VonetsVap11G-500S-
VonetsVbg1200 Firmware<= 3.3.23.6.9
VonetsVbg1200-
VonetsVap11S-5G Firmware<= 3.3.23.6.9
VonetsVap11S-5G-
VonetsVap11S Firmware<= 3.3.23.6.9
VonetsVap11S-
VonetsVar11N-300 Firmware<= 3.3.23.6.9
VonetsVar11N-300-
VonetsVap11G-300 Firmware<= 3.3.23.6.9
VonetsVap11G-300-

Related Weaknesses (CWE)

CWE-77

References

FAQ

What is CVE-2024-37023?

CVE-2024-37023 is a vulnerability with a CVSS score of 9.1 (CRITICAL). Multiple OS command injection vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enable an authenticated remote attac...

How severe is CVE-2024-37023?

CVE-2024-37023 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2024-37023?

Check the references section above for vendor advisories and patch information. Affected products include: Vonets Var1200-H Firmware, Vonets Var1200-H, Vonets Var1200-L Firmware, Vonets Var1200-L, Vonets Var600-H Firmware.