critical9.1
CVE-2024-40089
A Command Injection vulnerability in Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, authenticated attackers to execute arbitrary code by injecting shell c…
Impact
A Command Injection vulnerability in Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, authenticated attackers to execute arbitrary code by injecting shell commands into the name of the Vilo device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Viloliving | Vilo 5 Firmware | through 5.16.1.33 |