CVE-2024-41889

Summary

Multiple Pimax products accept WebSocket connections from unintended endpoints. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker.

Affected Software

Weaknesses

• Improper restriction of communication channel to intended endpoints

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://pimax.com/pages/downloads-manuals
• https://github.com/OpenMAR/PiTool
• https://jvn.jp/en/jp/JVN50850706/

• ←Previous
• Next→