CVE-2024-46330

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-46330
VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the iptablesWebsFilterRun object.

7.4 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.5 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://hawktesters.com/5519644d-246e-4924-b7c8-8fdf742117be/704b5e66-fee5-4289-aa55-eb7feb5f0edc.pdf Broken Link
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:vonets:vap11g-300_firmware:3.3.23.6.9:*:*:*:*:*:*:*
cpe:2.3:h:vonets:vap11g-300:-:*:*:*:*:*:*:*
History

04 Jun 2025, 16:16

Type Values Removed Values Added
CPE cpe:2.3:h:vonets:vap11g-300:-:*:*:*:*:*:*:*
cpe:2.3:o:vonets:vap11g-300_firmware:3.3.23.6.9:*:*:*:*:*:*:*
References () https://hawktesters.com/5519644d-246e-4924-b7c8-8fdf742117be/704b5e66-fee5-4289-aa55-eb7feb5f0edc.pdf - () https://hawktesters.com/5519644d-246e-4924-b7c8-8fdf742117be/704b5e66-fee5-4289-aa55-eb7feb5f0edc.pdf - Broken Link
First Time Vonets vap11g-300 Firmware
Vonets vap11g-300
Vonets

30 Sep 2024, 12:46

Type Values Removed Values Added
Summary
  • (es) Se descubrió que VONETS VAP11G-300 v3.3.23.6.9 contenía una vulnerabilidad de inyección de comandos a través del objeto iptablesWebsFilterRun.

26 Sep 2024, 15:35

Type Values Removed Values Added
CWE CWE-78
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.4

26 Sep 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-26 14:15

Updated : 2025-06-04 16:16

NVD link : CVE-2024-46330

Mitre link : CVE-2024-46330

CVE.ORG link : CVE-2024-46330

JSON object : View

Products Affected

vonets

  • vap11g-300_firmware
  • vap11g-300
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')