← CVE Intelligence

CVE-2024-21786

MC Technologies / MC LR Router PUBLISHED

Description (CNA)

An OS command injection vulnerability exists in the web interface configuration upload functionality of MC Technologies MC LR Router 2.10.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Affected (CNA)

Vendor / productVersions
MC Technologies / MC LR Routeraffected 2.10.5 (QEMU)

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.