Lucene search

K
nvd[email protected]NVD:CVE-2024-7029
HistoryAug 02, 2024 - 3:16 p.m.

CVE-2024-7029

2024-08-0215:16:37
CWE-77
web.nvd.nist.gov
10
commands injection
network
authentication

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.338

Percentile

97.1%

Commands can be injected over the network and executed without authentication.

Affected configurations

Nvd
Node
avtechavm1203_firmwareRangefullimg-1023-1007-1011-1009
AND
avtechavm1203Match-
VendorProductVersionCPE
avtechavm1203_firmware*cpe:2.3:o:avtech:avm1203_firmware:*:*:*:*:*:*:*:*
avtechavm1203-cpe:2.3:h:avtech:avm1203:-:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.338

Percentile

97.1%