【Vulnerability Alert】Taiwan Secom WRTM326 - OS Command Injection
publish date :
2024-10-22
update date :
2024-10-22
Source: Ministry of education information & communication security contingency platform
| Publication Number | TACERT-ANA-2024102101101414 | Publication Time | 2024/10/21 13:18 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2024/10/19 13:18 |
| Impact Level | Medium | ||
| [Subject] 【Vulnerability Alert】Taiwan Secom WRTM326 - OS Command Injection |
|||
| [Content] Forwarded from TWCERTCC-200-202410-00000011 TWCERT/CC issued TVN-202410017, CVE-2024-10119 (CVSS: 9.8) on 2024-10-18. Taiwan Secom wireless router WRTM326 does not properly validate specific parameters, allowing remote attackers without authentication to send specially crafted requests and execute arbitrary system commands. Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform] WRTM326 version 2.3.20 and earlier (excluding 2.3.20) |
|||
| [Recommended Actions] Update WRTM326 to version 2.3.20 or later. |
|||
| [Reference] Taiwan Secom WRTM326 - OS Command Injection:https://www.twcert.org.tw/tw/cp-132-8156-81c9d-1.html |
|||
(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
Organizer:
Computer Center
