CVE-2024-4999

CriticalCVSS 9.4/10Last modified Jun 17, 2026

Description

A vulnerability in the web-based management interface of multiple Ligowave devices could allow an authenticated remote attacker to execute arbitrary commands with elevated privileges.This issue affects UNITY: through 6.95-2; PRO: through 6.95-1.Rt3883; MIMO: through 6.95-1.Rt2880; APC Propeller: through 2-5.95-4.Rt3352.

Metrics

CVSS 4.0 9.4/10CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:M/U:Amber

Weakness enumeration

CWE-77

Affected software

VendorProductVersions
LigowaveUNITY<= 6.95-2
LigowavePRO<= 6.95-1.rt3883
LigowaveMIMO<= 6.95-1.rt2880
LigowaveAPC Propeller<= 2-5.95-4.rt3352
ligowaveunity6.95-2
ligowavepro6.95-1.rt3883
ligowavemimo6.95-1.rt2880
ligowaveapc_propeller2-5.95-4.rt3352

References

Timeline

Published
May 16, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-499905.5In the Linux kernel, the following vulnerability has been resolved: drm/xe/hdcp: Check GSC structure validity Sometimes xe_gsc is not initCVE-2024-499917.8In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer Pass pointerCVE-2024-499927.8In the Linux kernel, the following vulnerability has been resolved: drm/stm: Avoid use-after-free issues with crtc and plane ltdc_load() cCVE-2024-499945.5In the Linux kernel, the following vulnerability has been resolved: block: fix integer overflow in BLKSECDISCARD I independently rediscoveCVE-2024-499967.8In the Linux kernel, the following vulnerability has been resolved: cifs: Fix buffer overflow when parsing NFS reparse points ReparseDataLCVE-2024-499977.5In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix memory disclosure When applying paddinCVE-2024-499984.7In the Linux kernel, the following vulnerability has been resolved: net: dsa: improve shutdown sequence Alexander Sverdlin presents 2 probCVE-2024-499995.5In the Linux kernel, the following vulnerability has been resolved: afs: Fix the setting of the server responding flag In afs_wait_for_opeCVE-2024-50007.5An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS products which can cause CVE-2024-500005.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() In mlx5e_tir_buCVE-2024-500015.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix error path in multi-packet WQE transmit Remove the erronCVE-2024-500025.5In the Linux kernel, the following vulnerability has been resolved: static_call: Handle module init failure correctly in static_call_del_mo
CVE-2024-4999: Critical severity, CVSS 9.4 | Vulnix