CVE-2024-58257
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD
Description
EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution.
Affected (1)
Products: Huawei: Enzoh W5611t Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.07 |
| Running on/with | Platform Versions |
|---|---|
Huawei Enzoh W5611t | All versions |
Related CWEs
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
References (1)
Source: psirt@huawei.com
Vendor Advisory
Timeline
No history available yet.