← Back to browse · API

CVE-2024-44466

Severity
CRITICAL
CVSS
9.8
EPSS
0.1073
Risk score
42.96
CISA KEV
No
PoC
No
Published
2024-09-11
Modified
2024-09-11
First seen
2026-08-07
Aliases
EUVD-2024-41038, GHSA-P9P3-PVMX-PXRH
Products
n/a:n/a n/a
Sources
euvd EUVD-2024-41038

Description

COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface.

References