← Database

CVE-2024-48895

HIGH CVSS: 8.8 Published: 2024-11-20 Modified: 2026-06-17

Description

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote authenticated attacker may execute an arbitrary OS command.

Affected Platforms

Unknown

Weakness Type

CWE-78

References