CVE-2024-11983

—

CVSS 3.1

7.2 high

EPSS

1%p64

Published

Nov 29, 2024 (Nov 29, 2024)

Modified

Jun 17, 2026

Description

Certain models of routers from Billion Electric has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject arbitrary system commands into a specific SSH function and execute them on the device.

Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.