{"id":"CVE-2024-44414","aliases":["EUVD-2024-41031","GHSA-gm5g-wg8x-c88g"],"status":"published","title":"A vulnerability was discovered in FBM_292W-21.03.10V, which has been classified as critical. This...","description":"A vulnerability was discovered in FBM_292W-21.03.10V, which has been classified as critical. This issue affects the sub_4901E0 function in the msp_info.htm file. Manipulation of the path parameter can lead to command injection.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.01452,"percentile":0.73776,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2024-10-11T00:00:00Z","modified":"2026-06-17T07:52:50Z","products":[{"vendor":"wayos","product":"fbm_292w_firmware"}],"references":[{"url":"https://github.com/IotChan/cve/blob/main/wayos/FBM_292W/wayos%20FBM_292W.md"},{"url":"https://github.com/IotChan/cve/blob/main/wayos/FBM_292W/CVE-2024-44414"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-44414"},{"url":"https://github.com/advisories/GHSA-gm5g-wg8x-c88g"}],"sources":{"cve":[{"id":"CVE-2024-44414","description":"A vulnerability was discovered in FBM_292W-21.03.10V, which has been classified as critical. This issue affects the sub_4901E0 function in the msp_info.htm file. Manipulation of the path parameter can lead to command injection.","status":"published","published":"2024-10-11T00:00:00Z","modified":"2024-10-11T18:20:19.745Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:34:06.48311Z"}],"euvd":[{"id":"EUVD-2024-41031","description":"A vulnerability was discovered in FBM_292W-21.03.10V, which has been classified as critical. This issue affects the sub_4901E0 function in the msp_info.htm file. Manipulation of the path parameter can lead to command injection.","status":"published","published":"2024-10-11T00:00:00Z","modified":"2024-10-11T18:20:19Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:27:38.618953Z"}],"ghsa":[{"id":"GHSA-gm5g-wg8x-c88g","title":"A vulnerability was discovered in FBM_292W-21.03.10V, which has been classified as critical. This...","description":"A vulnerability was discovered in FBM_292W-21.03.10V, which has been classified as critical. This issue affects the sub_4901E0 function in the msp_info.htm file. Manipulation of the path parameter can lead to command injection.","status":"published","published":"2024-10-11T18:32:50Z","modified":"2024-10-12T00:31:53Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:58:29.701719Z"}],"nvd":[{"id":"CVE-2024-44414","description":"A vulnerability was discovered in FBM_292W-21.03.10V, which has been classified as critical. This issue affects the sub_4901E0 function in the msp_info.htm file. Manipulation of the path parameter can lead to command injection.","status":"published","published":"2024-10-11T17:15:03.88Z","modified":"2026-06-17T07:52:50.287Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:10:31.879321Z"}]}}