{"id":"CVE-2024-31977","aliases":["EUVD-2024-29835","GHSA-4r38-rqh5-3fvr"],"status":"published","title":"Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.5.5.1, devices allow OS...","description":"Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via shell metacharacters to the Ping or Traceroute utility.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01684,"percentile":0.77181,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2024-07-24T00:00:00Z","modified":"2026-06-17T07:29:02Z","products":[{"vendor":"adtran","product":"834-5_firmware"},{"vendor":"adtran","product":"sdg_smartos"}],"references":[{"url":"https://github.com/actuator/cve/tree/main/AdTran/834-5","tags":["x_transferred","Broken Link"]},{"url":"https://drive.proton.me/urls/GXDM5T5NSG#RHa0yVWSKyoz","tags":["x_transferred","Permissions Required"]},{"url":"https://github.com/actuator/cve/blob/main/AdTran/CVE-2024-31977","tags":["x_transferred","Third Party Advisory"]},{"url":"https://supportcommunity.adtran.com/t5/Security-Advisories/ADTSA-2024001-Multiple-vulnerabilities-in-Service-Delivery-Gateway-products/ta-p/39332"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-31977"},{"url":"https://github.com/advisories/GHSA-4r38-rqh5-3fvr"}],"sources":{"cve":[{"id":"CVE-2024-31977","description":"Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via shell metacharacters to the Ping or Traceroute utility.","status":"published","published":"2024-07-24T00:00:00Z","modified":"2024-09-04T14:21:20.309Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:34:14.308905Z"}],"euvd":[{"id":"EUVD-2024-29835","description":"Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via shell metacharacters to the Ping or Traceroute utility.","status":"published","published":"2024-07-24T00:00:00Z","modified":"2024-09-04T14:21:20Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:56:04.589959Z"}],"ghsa":[{"id":"GHSA-4r38-rqh5-3fvr","title":"Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.5.5.1, devices allow OS...","description":"Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.5.5.1, devices allow OS Command Injection via shell metacharacters to the Ping or Traceroute utility.","status":"published","published":"2024-07-24T15:31:28Z","modified":"2024-09-03T21:32:16Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:58:09.756821Z"}],"nvd":[{"id":"CVE-2024-31977","description":"Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via shell metacharacters to the Ping or Traceroute utility.","status":"published","published":"2024-07-24T15:15:11.863Z","modified":"2026-06-17T07:29:02.897Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:10:14.437386Z"}]}}