← Database

CVE-2023-24796

CRITICAL CVSS: 9.8 Published: 2023-04-26 Modified: 2026-06-17

Description

Password vulnerability found in Vinga WR-AC1200 81.102.1.4370 and before allows a remote attacker to execute arbitrary code via the password parameter at the /goform/sysTools and /adm/systools.asp endpoints.

Affected Platforms

Vinga Wr-Ac1200Vinga Wr-Ac1200 Firmware

Weakness Type

NVD-CWE-noinfo

References