Ht3300 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:sunniwell:ht3300_firmware:*:*:*:*:*:*:*:*part: o version: * update: *
| Vendor | Sunniwell (b09e4497-72ef-5ce5-becb-3eca53583f1f) |
|---|---|
| Product | Ht3300 Firmware (91997320-988f-5e4f-86d1-1dda278b04b8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-48073 |
vulnerable | 2026-06-08 06:48:13.608750 |
Details available
sunniwell HT3300 before 1.0.0.B022.2 is vulnerable to Insecure Permissions. The /usr/local/bin/update program, which is responsible for updating the software in the HT3300 device, is given the execution mode of sudo NOPASSWD. This program is vulnerable to a command injection vulnerability, which could allow an attacker to pass commands to this program via command line arguments to gain elevated root privileges.
Published: 2024-11-08T00:00:00.000Z
Updated: 2024-11-18T14:43:39.165Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.