CVE-2024-47944

Publication date

2024-10-15 09:00:30

Family

SEC-VLab

State

PUBLISHED

Description

The device directly executes .patch firmware upgrade files on a USB stick without any prior authentication in the admin interface. This leads to an unauthenticated code execution via the firmware upgrade function.