CVE-2024-29075

Published: Nov 12, 2024Modified: Jun 17, 2026Deferred

4.6

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.1 / Impact: 2.5

Source: vultures@jpcert.or.jp (Secondary)

Description

Active debug code vulnerability exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, a network-adjacent authenticated attacker may obtain or alter the settings of the device .

Related CWEs

CWE-489

Active Debug Code

The product is deployed to unauthorized actors with debugging code still enabled or active, which can create unintended entry points or expose sensitive information.

References (1)

https://jvn.jp/en/vu/JVNVU90676195/

Source: vultures@jpcert.or.jp

Timeline

No history available yet.