Approved changes feed: RSS · Atom

cpe:2.3:o:4ipnet:eap-767:3.42.00:*:*:*:*:*:*:*

part: o version: 3.42.00 update: *

Vendor4Ipnet (fb8a5c0b-29e7-5930-91fe-64c44d201b33)
ProductEap 767 (e9761f7b-ddf3-53ba-8167-1556377a8a94)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-24301 vulnerable 2026-06-03 14:55:05.213832 Details available
Command Injection vulnerability discovered in 4ipnet EAP-767 device v3.42.00 within the web interface of the device allows attackers with valid credentials to inject arbitrary shell commands to be executed by the device with root privileges.
Published: 2024-02-14T00:00:00.000Z
Updated: 2024-08-27T18:56:01.133Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24300 vulnerable 2026-06-03 14:55:05.211293 Details available
4ipnet EAP-767 v3.42.00 is vulnerable to Incorrect Access Control. The device uses the same set of credentials, regardless of how many times a user logs in, the content of the cookie remains unchanged.
Published: 2024-02-14T00:00:00.000Z
Updated: 2024-08-16T18:22:20.145Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.