CVE-2024-30973

An issue in V-SOL G/EPON ONU HG323AC-B with firmware version V2.0.08-210715 allows an attacker to execute arbtirary code and obtain sensitive information via crafted POST request to /boaform/getASPdata/formFirewall, /boaform/getASPdata/formAcc.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.94% chance of exploitation in the next 30 days, 59th percentile

Published

2024-05-06

Updated

2024-08-09

Proof-of-concept exploits (1)

• Athos-Zago/CVE-2024-309730★ · 2024-04-26

References

• CVE Record
• NVD entry

Related

• CVE-2024-3097
• CVE-2024-30979
• CVE-2024-30965
• CVE-2024-30980
• CVE-2024-30961
• CVE-2024-30981