F3X24 Firmware

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:four-faith:f3x24_firmware:2.0:*:*:*:*:*:*:*

part: o version: 2.0 update: *

VendorFour Faith (a2c9dbf9-7af1-5590-9fbc-8535bf3ec62d)
ProductF3X24 Firmware (fb3c38b8-3100-52c3-8744-2f45e137ee28)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12856 vulnerable 2026-06-08 06:25:36.232617 Four-Faith Industrial Router adjust_sys_time OS Command Injection
HIGH (7.2)
The Four-Faith router models F3x24 and F3x36 are affected by an operating system (OS) command injection vulnerability. At least firmware version 2.0 allows authenticated and remote attackers to execute arbitrary OS commands over HTTP when modifying the system time via apply.cgi. Additionally, this firmware version has default credentials which, if not changed, would effectively change this vulnerability into an unauthenticated and remote OS command execution issue.
Published: 2024-12-27T16:03:04.567Z
Updated: 2025-11-22T12:22:39.876Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.