CVE-2024-8892

published 2024-09-18

CVE-2024-8892: Vulnerability in CIRCUTOR TCP2RS+ firmware version 1.3b, which could allow an attacker to modify any configuration value, even if the device has the…

Priority P2 62 critical 9.1 CVSS 3.1

AV N AC L PR N UI N S U C N I H A H

Vulnerability in CIRCUTOR TCP2RS+ firmware version 1.3b, which could allow an attacker to modify any configuration value, even if the device has the user/password authentication option enabled, without authentication by sending packets through the UDP protocol and port 2000, deconfiguring the device and thus disabling its use. This equipment is at the end of its useful life cycle.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
circutor	circutor_tcp2rs	—	—
circutor	tcp2rs_+_firmware	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-400