CVE-2024-31977
Adtran
CVE-2024-31977 allows for OS Command Injection in Adtran devices. Attackers can inject malicious commands via the Ping or Traceroute utility using shell metacharacters. This vulnerability affects Adtran 834-5 devices with firmware version 11.1.0.101-202106231430 and is fixed in SmartOS Version 12.6.3.1. With a CVSS score of 8.8 and a SOCRadar Vulnerability Risk Score (SVRS) of 77, this vulnerability poses a significant risk, nearing critical levels requiring prompt review. Successful exploitation could enable unauthorized access and control over the affected system. Although the SVRS isn't above 80, the high CVSS and SVRS scores indicate a serious vulnerability needing immediate patching to prevent potential cyberattacks. The command injection flaw makes the devices susceptible to remote code execution, impacting confidentiality, integrity, and availability.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.