critical9.8
CVE-2024-36061
EnGenius EWS356-FIT devices through 1.1.30 allow blind OS command injection.
Impact
EnGenius EWS356-FIT devices through 1.1.30 allow blind OS command injection. This allows an attacker to execute arbitrary OS commands via shell metacharacters to the Ping and Speed Test utilities.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Engeniustech | Ews356-Fit Firmware | through 1.1.30 |