Skip to content
NewA calmer, faster ZeroHour
VulnerabilityPoC ×23

CVE-2024-21786

CVSS 3.1
7.2 high
EPSS
10%p96
Published
·
Modified
Analyze CVE-2024-21786 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An OS command injection vulnerability exists in the web interface configuration upload functionality of MC Technologies MC LR Router 2.10.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Vendors
mc-technologies
Products
mc lr router firmware
Weakness
CWE-78
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (10.4%)

In the news

2 stories