> CVE-2024-5035

« BACK_TO_HOME
PUBLISHED
2024-05-27 08:15
MODIFIED
2024-11-21 09:46
EPSS (Prob. Exploit)
3.24%
Top 11.8%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-11

> DESCRIPTION

The affected device expose a network service called "rftest" that is vulnerable to unauthenticated command injection on ports TCP/8888, TCP/8889, and TCP/8890. By successfully exploiting this flaw, remote unauthenticated attacker can gain arbitrary command execution on the device with elevated privileges.This issue affects Archer C4500X: through 1_1.1.6.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-xh4g-c9p6-5jxg HIGH

LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php

AFFECTED PACKAGES:
COMPOSER / librenms/librenms
<= 24.9.1
Fixed in: 24.10.0

> HISTORIQUE DES MODIFICATIONS

Première apparition
27/05/2024 08:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 14:51
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME