Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2024-4999

Ligowave Unity/Pro/Mimo/APC Arbitrary Command Injection

Description

A vulnerability in the web-based management interface of multiple Ligowave devices could allow an authenticated remote attacker to execute arbitrary commands with elevated privileges.This issue affects UNITY: through 6.95-2; PRO: through 6.95-1.Rt3883; MIMO: through 6.95-1.Rt2880; APC Propeller: through 2-5.95-4.Rt3352.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ligowave UNITY

Default version status: unaffected

  • 0 to ≤ 6.95-2affected

Ligowave PRO

Default version status: unaffected

  • 0 to ≤ 6.95-1.rt3883affected

Ligowave MIMO

Default version status: unaffected

  • 0 to ≤ 6.95-1.rt2880affected

Ligowave APC Propeller

Default version status: unaffected

  • 0 to ≤ 2-5.95-4.rt3352affected

References