Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2024-3659

Command injection in KAON AR2140 routers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERT-PL

Description

Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one of the endpoints. In order to exploit this vulnerability, one has to have access to the administrative portal of the router.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

KAON Group AR2140

Default version status: unaffected

  • 3.0.0 to < 3.2.50affected
  • 4.0.0 to < 4.2.16affected

References