CVE-2024-31406

Published: Apr 24, 2024Modified: Jun 17, 2026Deferred

8.8

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Active debug code vulnerability exists in RoamWiFi R10 prior to 4.8.45. If this vulnerability is exploited, a network-adjacent unauthenticated attacker with access to the device may perform unauthorized operations.

Related CWEs

CWE-489

Active Debug Code

The product is deployed to unauthorized actors with debugging code still enabled or active, which can create unintended entry points or expose sensitive information.

References (4)

https://jvn.jp/en/jp/JVN62737544/

Source: vultures@jpcert.or.jp

https://www.roamwifi.hk/product.jsp

Source: vultures@jpcert.or.jp

https://jvn.jp/en/jp/JVN62737544/

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.roamwifi.hk/product.jsp

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.