CVE-2024-4999

published 2024-05-16

CVE-2024-4999: A vulnerability in the web-based management interface of multiple Ligowave devices could allow an authenticated remote attacker to execute arbitrary commands…

Priority P2 66 critical 9.4 CVSS 4.0

AV N AC L AT N PR H UI N VC H VI H VA H SC H SI H SA H E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S N AU Y R U V D RE M U Amber

A vulnerability in the web-based management interface of multiple Ligowave devices could allow an authenticated remote attacker to execute arbitrary commands with elevated privileges.This issue affects UNITY: through 6.95-2; PRO: through 6.95-1.Rt3883; MIMO: through 6.95-1.Rt2880; APC Propeller: through 2-5.95-4.Rt3352.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ligowave	apc_propeller	<= 2-5.95-4.rt3352	—
ligowave	mimo	<= 6.95-1.rt2880	—
ligowave	pro	<= 6.95-1.rt3883	—
ligowave	unity	<= 6.95-2	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-77