Researchers Discover Command Injection Flaw in Wi-Fi Alliance's Test Suite

2024-10-25 13:41

A security flaw impacting the Wi-Fi Test Suite could enable unauthenticated local attackers to execute arbitrary code with elevated privileges. The CERT Coordination Center (CERT/CC) said the vulnerability, tracked as CVE-2024-41992, said the susceptible code from the Wi-Fi Alliance has been found deployed on Arcadyan FMIMG51AX000J routers. "This flaw allows an unauthenticated local attacker to

News URL

https://thehackernews.com/2024/10/researchers-discover-command-injection.html

#commandinjection #researcher #test #wifi #CVE-2024-41992

Related Vulnerability

DATE	CVE	VULNERABILITY TITLE	RISK
2024-11-11	CVE-2024-41992	Wi-Fi Alliance wfa_dut (in Wi-Fi Test Suite) through 9.0.0 allows OS command injection via 802.11x frames because the system() library function is used.	0.0