Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-2415

Command injection vulnerability in Movistar 4G router

Description

Command injection vulnerability in Movistar 4G router affecting version ES_WLD71-T1_v2.0.201820. This vulnerability allows an authenticated user to execute commands inside the router by making a POST request to the URL '/cgi-bin/gui.cgi'.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Movistar Router Movistar 4G

Default version status: unaffected

  • ES_WLD71-T1_v2.0.20182affected

References