CVE-2024-3786

Summary

CVE-2024-3786 is a newly identified vulnerability affecting WBSAirback version 21.02.04. This issue arises due to insufficient handling of Server-Side Includes (SSI) during Device Synchronizations, specifically in the /admin/DeviceReplication path. An attacker can exploit this weakness to execute arbitrary code remotely, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.