CVE-2024-41992 Command injection in n/a
Attackers can execute arbitrary commands as root on Wi-Fi Alliance test suite devices via crafted 802.11x frames due to unsafe system() usage.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-41992?
CVE-2024-41992 is a high-severity command injection vulnerability in n/a, published on 11 Nov 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Wi-Fi Alliance wfa_dut (in Wi-Fi Test Suite) through 9.0.0 allows OS command injection via 802.11x frames because the system() library function is used. For example, on Arcadyan FMIMG51AX000J devices, this leads to wfaTGSendPing remote code execution as root via traffic to TCP port 8000 or 8080 on a LAN interface. On other devices, this may be exploitable over a WAN interface.
Weakness: CWE-78
Which versions are affected by CVE-2024-41992?
How do I fix CVE-2024-41992?
No fix has been published for CVE-2024-41992 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2024-41992 being exploited?
There is no known exploitation of CVE-2024-41992 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-xwr3-f5gh-9v6w.