CVE-2024-53688

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier, which may allow a logged-in user to execute an arbitrary OS command using a crafted HTTP request.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published: Dec 18, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-53696.1A vulnerability was found in Kashipara College Management System 1.0. It has been declared as problematic. Affected by this vulnerability is CVE-2024-536905.5In the Linux kernel, the following vulnerability has been resolved: nilfs2: prevent use of deleted inode syzbot reported a WARNING in nilf CVE-2024-536918.8A link following vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could all CVE-2024-536924.7A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could CVE-2024-536937.1An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system vers CVE-2024-536948.6A time-of-check time-of-use (TOCTOU) race condition vulnerability has been reported to affect several product versions. If exploited, the vu CVE-2024-536959.1A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote att CVE-2024-536964.9A server-side request forgery (SSRF) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow rem CVE-2024-536977.2An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability cou CVE-2024-536984.9A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow CVE-2024-536997.2An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability cou CVE-2024-53706.1A vulnerability was found in Kashipara College Management System 1.0. It has been rated as problematic. Affected by this issue is some unkno