CVE-2024-45242

EnGenius ENH1350EXT A8J-ENH1350EXT devices through 3.9.3.2_c1.9.51 allow (blind) OS Command Injection via shell metacharacters to the Ping or Speed Test utility. During the time of initial setup, the device creates an open unsecured network whose admin panel is configured with the default credentials of admin/admin. An unauthorized attacker in proximity to the Wi-Fi network can exploit this window of time to execute arbitrary OS commands with root-level permissions.

• CWE-78

• https://github.com/actuator/cve/blob/main/Engenius/CVE-2024-45242
• https://github.com/actuator/cve/blob/main/Engenius/CVE-2024-45242_Extended_Report.pdf

Published

Oct 24, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-45237An issue was discovered in Fort before 1.6.3. A malicious RP…9.8
• CVE-2024-45238An issue was discovered in Fort before 1.6.3. A malicious RP…7.5
• CVE-2024-45239An issue was discovered in Fort before 1.6.3. A malicious RP…7.5
• CVE-2024-4524A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2024-45240The TikTok (aka com.zhiliaoapp.musically) application before…7.4
• CVE-2024-45241A traversal vulnerability in GeneralDocs.aspx in CentralSqua…7.5
• CVE-2024-45244Hyperledger Fabric through 3.0.0 and 2.5.x through 2.5.9 do …5.3
• CVE-2024-45245Diebold Nixdorf – CWE-200: Exposure of Sensitive Information…7.8
• CVE-2024-45246Diebold Nixdorf – CWE-427: Uncontrolled Search Path Element7.3
• CVE-2024-45247Sonarr – CWE-601: URL Redirection to Untrusted Site ('Open R…6.1
• CVE-2024-45248Multi-DNC – CWE-35: Path Traversal: '.../...//'7.5
• CVE-2024-45249Cavok – CWE-89: Improper Neutralization of Special Elements …9.8