CVE-2024-2414

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

The primary channel is unprotected on Movistar 4G router affecting E version S_WLD71-T1_v2.0.201820. This device has the 'adb' service open on port 5555 and provides access to a shell with root privileges.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-419

Affected software

Vendor	Product	Versions
Movistar	Router Movistar 4G	ES_WLD71-T1_v2.0.20182
movistar	es_wld71-t1_firmware	2.0.201820

References

Timeline

Published: Mar 13, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-241407.2Sourcecodester Daily Habit Tracker App 1.0 allows SQL Injection via the parameter 'tracker.'CVE-2024-241419.8Sourcecodester School Task Manager App 1.0 allows SQL Injection via the 'task' parameter.CVE-2024-241429.8Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter.CVE-2024-241466.5A memory leak issue discovered in parseSWF_DEFINEBUTTON in libming v0.4.8 allows attackers to cause s denial of service via a crafted SWF fi CVE-2024-241476.5A memory leak issue discovered in parseSWF_FILLSTYLEARRAY in libming v0.4.8 allows attackers to cause s denial of service via a crafted SWF CVE-2024-241487.5A memory leak issue discovered in parseSWF_FREECHARACTER in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF f CVE-2024-241496.5A memory leak issue discovered in parseSWF_GLYPHENTRY in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file CVE-2024-24157.8Command injection vulnerability in Movistar 4G router affecting version ES_WLD71-T1_v2.0.201820. This vulnerability allows an authenticated CVE-2024-241506.5A memory leak issue discovered in parseSWF_TEXTRECORD in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file CVE-2024-241556.5Bento4 v1.5.1-628 contains a Memory leak on AP4_Movie::AP4_Movie, parsing tracks and added into m_Tracks list, but mp42aac cannot correctly CVE-2024-241566.1Cross Site Scripting (XSS) vulnerability in Gnuboard g6 before Github commit 58c737a263ac0c523592fd87ff71b9e3c07d7cf5, allows remote attacke CVE-2024-241576.1Gnuboard g6 / https://github.com/gnuboard/g6 commit c2cc1f5069e00491ea48618d957332d90f6d40e4 is vulnerable to Cross Site Scripting (XSS) via