CVE-2024-41992

HIGH

Wi-Fi Alliance wfa_dut <9.0.0 - Command Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-41992. PoCs published by fj016.

AI-analyzed exploit summary This repository contains a functional exploit for CVE-2024-41992, demonstrating a command injection vulnerability via crafted TLV packets. The exploit sends a malicious payload to a target device, triggering remote code execution by fetching and executing a script from an attacker-controlled server.

Description

Wi-Fi Alliance wfa_dut (in Wi-Fi Test Suite) through 9.0.0 allows OS command injection via 802.11x frames because the system() library function is used. For example, on Arcadyan FMIMG51AX000J devices, this leads to wfaTGSendPing remote code execution as root via traffic to TCP port 8000 or 8080 on a LAN interface. On other devices, this may be exploitable over a WAN interface.

Exploits (1)

nomisec WORKING POC 3 stars
by fj016 · poc
https://github.com/fj016/CVE-2024-41992-PoC

This repository contains a functional exploit for CVE-2024-41992, demonstrating a command injection vulnerability via crafted TLV packets. The exploit sends a malicious payload to a target device, triggering remote code execution by fetching and executing a script from an attacker-controlled server.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Wfa-DUT (likely a Wi-Fi Alliance test tool)
No auth needed
Prerequisites: Network access to the target device · Target device running Wfa-DUT on port 8080 · Attacker-controlled server to host payload
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (2)

Core 2
Core References
Third Party Advisory, US Government Resource
https://www.kb.cert.org/vuls/id/123336

Scores

CVSS v3 8.8
EPSS 0.0255
EPSS Percentile 83.0%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-78
Status published
Published Nov 11, 2024
Tracked Since Feb 18, 2026