CVE-2024-3659 — Command injection in KAON AR2140 routers

CVE-2024-3659

Command injection in KAON AR2140 routers PUBLISHED

Description (CNA)

Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one of the endpoints. In order to exploit this vulnerability, one has to have access to the administrative portal of the router.

Affected (CNA)

Vendor / product	Versions
KAON Group / AR2140	affected 3.0.0 before 3.2.50; affected 4.0.0 before 4.2.16

CWE

CWE-78

References

https://cert.pl/en/posts/2024/08/CVE-2024-3659
https://cert.pl/posts/2024/08/CVE-2024-3659

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.