CVE-2024-58338
CRITICALAnevia Flamingo XL 3.2.9 - OS Command Injection via Traceroute Command
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-58338. PoCs published by LiquidWorm.
AI-analyzed exploit summary This exploit demonstrates a jailbreak from a restricted shell environment in Anevia Flamingo XL 3.2.9 by leveraging command injection via the traceroute command, allowing an attacker to escape the sandbox and gain root access.
Description
Anevia Flamingo XL 3.2.9 contains a restricted shell vulnerability that allows remote attackers to escape the sandboxed environment through the traceroute command. Attackers can exploit the traceroute command to inject shell commands and gain full root access to the device by bypassing the restricted login environment.
Exploits (1)
This exploit demonstrates a jailbreak from a restricted shell environment in Anevia Flamingo XL 3.2.9 by leveraging command injection via the traceroute command, allowing an attacker to escape the sandbox and gain root access.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H