CVE-2024-10119

The wireless router WRTM326 from SECOM does not properly validate a specific parameter. An unauthenticated remote attacker could execute arbitrary system commands by sending crafted requests.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - twcert@cert.org.tw

Published

2024-10-18

Last modified

2024-10-18

Weaknesses

CWE-78

Affected products

• Wrtm326 (Secom)
• Wrtm326 Firmware (Secom)
• Wrtm326 Firmware (Zte)

References

• https://www.twcert.org.tw/en/cp-139-8157-e0461-2.html
• https://www.twcert.org.tw/tw/cp-132-8156-81c9d-1.html