Vulnerabilitymedium

MC LR Router and GoCast unpatched vulnerabilities

Cisco TalosDec 9, 2024 · 19:30 UTC (Dec 9, 2024)1 min read2 · 1 read

Read at blog.talosintelligence.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-28025 CVE-2024-28027 CVE-2024-21786 CVE-2024-21855 CVE-2024-28892 CVE-2024-29224

Tags: cve-2024-28025 cve-2024-28027 cve-2024-21786 cve-2024-21855 cve-2024-28892 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-21786 +2 related CVEs CVE-2024-28025 CVE-2024-28027	An OS command injection vulnerability exists in the web interface configuration upload functionality of MC Technologies MC LR Router 2.10.5	7.2	10%	PoC ×2	Nov 21, 2024
CVE-2024-28892 +2 related CVEs CVE-2024-29224 CVE-2024-21855	An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3	9.8	6%		Nov 21, 2024

From the original article

1 min read at blog.talosintelligence.com

Cisco Talos' Vulnerability Research team recently discovered two vulnerabilities in MC Technologies LR Router and three vulnerabilities in the GoCast service. These vulnerabilities have not been patched at time of this posting. For Snort coverage that can detect the exploitation of these vulnerabilities, download the latest rule sets from Snort.

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.