CVE-2024-45827: high-severity vulnerability in SoftBank Corp. Mesh Wi-Fi router RP562B
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8epss 1.6%
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, a network-adjacent authenticated attacker may execute an arbitrary OS command.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
SoftBank Corp. · Mesh Wi-Fi router RP562BRelated CVEs — SoftBank Corp. Mesh Wi-Fi router RP562B
In the same product, most dangerous first.
References
https://jvn.jp/en/vu/JVNVU90676195/