CVE-2024-5403
ASKEY 5G NR Small Cell - Command Injection
- State
- Published
- Severity
- 7.2 High
- Published
- May 27, 2024
- Updated
- Aug 1, 2024
- Reserved
- May 27, 2024
Description
ASKEY 5G NR Small Cell fails to properly filter user input for certain functionality, allowing remote attackers with administrator privilege to execute arbitrary system commands on the remote server.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.2 High | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H | twcert |
Weaknesses
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected Products
| Product | Versions |
|---|---|
5G NR Small CellASKEY |
|
References
- https://www.twcert.org.tw/tw/cp-132-7821-87e38-1.htmlthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.