CVE-2024-55547

CRITICAL

ORing IAP-420 Firmware < 2.01e - OS Command Injection via SNMP Objects

Title source: llm

SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e.

Core 2

Core References

Mailing List

Third Party Advisory third-party-advisory

CVSS v3 9.8

EPSS 0.1694

EPSS Percentile 96.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

CWE

CWE-77

Status published

Products (1)

oringnet/iap-420_firmware < 2.01e

Published Dec 10, 2024

Tracked Since Feb 18, 2026