CVE-2024-33439
CRITICALCVSS 9.1/10EPSS 0.55%
Last modified
CVE-2024-33439 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. An issue in Kasda LinkSmart Router KW5515 v1.7 and before allows an authenticated remote attacker to execute arbitrary OS commands via cgi parameters.. EPSS estimates a 0.55% chance of exploitation in the next 30 days.
Description
An issue in Kasda LinkSmart Router KW5515 v1.7 and before allows an authenticated remote attacker to execute arbitrary OS commands via cgi parameters.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-33439?
An issue in Kasda LinkSmart Router KW5515 v1.7 and before allows an authenticated remote attacker to execute arbitrary OS commands via cgi parameters.
How severe is CVE-2024-33439?
CVE-2024-33439 has a CVSS score of 9.1/10 (CRITICAL severity). The EPSS model estimates a 0.55% probability of exploitation in the next 30 days.
How do I fix CVE-2024-33439?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-33433Cross Site Scripting vulnerability in TOTOLINK X2000R before…4.8
- CVE-2024-33434An issue in tiagorlampert CHAOS v5.0.1 before 1b451cf6258229…9.8
- CVE-2024-33435Insecure Permissions vulnerability in Guangzhou Yingshi Elec…9.8
- CVE-2024-33436An issue in CSS Exfil Protection v.1.1.0 allows a remote att…5.3
- CVE-2024-33437An issue in CSS Exfil Protection v.1.1.0 allows a remote att…7.5
- CVE-2024-33438File Upload vulnerability in CubeCart before 6.5.5 allows an…8
- CVE-2024-3344The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenb…5.4
- CVE-2024-33442An issue in flusity-CMS v.2.33 allows a remote attacker to e…4.3
- CVE-2024-33443An issue in onethink v.1.1 allows a remote attacker to execu…7.1
- CVE-2024-33444SQL injection vulnerability in onethink v.1.1 allows a remot…9.8
- CVE-2024-33445An issue in hisiphp v2.0.111 allows a remote attacker to exe…9.8
- CVE-2024-33449An SSRF issue in the PDFMyURL service allows a remote attack…9.8
Are you affected by CVE-2024-33439?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST