eap-767 vulnerabilities

2 known vulnerabilities in eap-767 from 4ipnet. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  eap-767: Improper Neutralization of Special Elements used in a Command

  CVE-2024-24301Feb 14, 20244ipnetEPSS 2.1%

  Command Injection vulnerability discovered in 4ipnet EAP-767 device v3.42.00 within the web interface of the device allows attackers with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges.

• 9.8 Critical severity

  eap-767: Improper Access Control

  CVE-2024-24300Feb 14, 20244ipnet

  4ipnet EAP-767 v3.42.00 is vulnerable to Incorrect Access Control. The device uses the same set of credentials, regardless of how many times a user logs in, the content of the cookie remains unchanged.