CVE-2024-9166

9.3 criticalEPSS 1.6%

Critical (9.3). EPSS 1.6% chance of exploitation in the next 30 days.

The device enables an unauthorized attacker to execute system commands with elevated privileges. This exploit is facilitated through the use of the 'getcommand' query within the application, allowing the attacker to gain root access.

Severity

CVSS 4.0

9.3 critical

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2024-09-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-270-03

Check your stack JSON