CVE-2024-5403

HIGH

ASKEY 5G NR Small Cell - Command Injection

Title source: llm
STIX 2.1

Description

ASKEY 5G NR Small Cell fails to properly filter user input for certain functionality, allowing remote attackers with administrator privilege to execute arbitrary system commands on the remote server.

References (1)

Core 1
Core References
Various Sources third-party-advisory
https://www.twcert.org.tw/tw/cp-132-7821-87e38-1.html

Scores

CVSS v3 7.2
EPSS 0.0056
EPSS Percentile 42.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-78
Status published
Products (1)
ASKEY/5G NR Small Cell nsc 2.1 V6
Published May 27, 2024
Tracked Since Feb 18, 2026