CVE-2024-4582

CVSS 3.1 Score 7.3 of 10 (high)

Details

Published May 7, 2024
Updated: Jun 4, 2024
CWE ID 78

Summary

CVE-2024-4582 is a newly disclosed critical vulnerability that impacts Faraday GM8181 and GM828x up to version 20240429. The issue lies within an unknown function of the NTP Service and can be exploited through manipulation of the ntp_srv argument, resulting in os command injection. An attacker can execute this vulnerability remotely. The exploit has been made public, increasing the risk of potential attacks. It is strongly recommended to upgrade the affected component as soon as possible to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share