Vulnerability Details CVE-2024-44466
COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.19
EPSS Ranking 95.1%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2024-44466
-
cpe:2.3:h:comfast:cf-xr11:-
-
cpe:2.3:o:comfast:cf-xr11_firmware:2.7.2