An OS command injection vulnerability exists in the web interface configuration upload functionality of MC Technologies MC LR Router 2.10.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
References
| Link | Resource |
|---|---|
| https://talosintelligence.com/vulnerability_reports/TALOS-2024-1954 | Exploit Third Party Advisory |
| https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1954 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
18 Dec 2024, 15:06
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://talosintelligence.com/vulnerability_reports/TALOS-2024-1954 - Exploit, Third Party Advisory | |
| References | () https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1954 - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:h:mc-technologies:mc_lr_router:-:*:*:*:*:*:*:* cpe:2.3:o:mc-technologies:mc_lr_router_firmware:2.10.5:*:*:*:*:*:*:* |
|
| First Time |
Mc-technologies
Mc-technologies mc Lr Router Firmware Mc-technologies mc Lr Router |
Information
Published : 2024-11-21 15:15
Updated : 2024-12-18 15:06
NVD link : CVE-2024-21786
Mitre link : CVE-2024-21786
CVE.ORG link : CVE-2024-21786
JSON object : View
Products Affected
mc-technologies
- mc_lr_router
- mc_lr_router_firmware
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')