CVE-2024-3659 — Command injection in KAON AR2140 routers
Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one of the endpoints. In order …
Published: 2024-08-08 · CVSS: 10.0 · CVSS 4.0
Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one of the endpoints. In order to exploit this vulnerability, one has to have access to the administrative portal of the router.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7