CVE-2024-47944 — Missing Protection Mechanism for Alternate Hardware Interface
The device directly executes .patch firmware upgrade files on a USB stick without any prior authentication in the admin interface. This leads to an unauthenticated code executio…
Published: 2024-10-15 · CVSS: 6.8 · CVSS 3.1
The device directly executes .patch firmware upgrade files on a USB stick without any prior authentication in the admin interface. This leads to an unauthenticated code execution via the firmware upgrade function.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7