CVE-2024-31977

Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via shell metacharacters to the Ping or Traceroute utility.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2024-07-24

Last modified

2024-09-04

Weaknesses

CWE-78

Affected products

• 834-5 Firmware (Adtran)
• Sdg Smartos (Adtran)

References

• https://drive.proton.me/urls/GXDM5T5NSG#RHa0yVWSKyoz
• https://github.com/actuator/cve/blob/main/AdTran/CVE-2024-31977
• https://github.com/actuator/cve/tree/main/AdTran/834-5
• https://supportcommunity.adtran.com/t5/Security-Advisories/ADTSA-2024001-Multiple-vulnerabilities-in-Service-Delivery-G…