CVE-2020-24849

8.8 highEPSS 3.3%

High (8.8) in fruitywifi project fruitywifi. EPSS 3.3% chance of exploitation in the next 30 days.

A remote code execution vulnerability is identified in FruityWifi through 2.4. Due to improperly escaped shell metacharacters obtained from the POST request at the page_config_adv.php page, it is possible to perform remote code execution by an authenticated attacker. This is similar to CVE-2018-17317.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.3% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2020-11-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fruitywifi_project:fruitywifi

References

http://fruitywifi.com/index_eng.html
https://gist.github.com/harsh-bothra/f899045b16bbba264628d79d52c07c22
https://github.com/xtr4nge/FruityWifi
http://fruitywifi.com/index_eng.html
https://gist.github.com/harsh-bothra/f899045b16bbba264628d79d52c07c22

Check your stack JSON