TI-2024-29900 CVE-2024-44466 · GHSA-p9p3-pvmx-pxrh
COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4.
Priority HIGH 82
COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub_424CB4.
Comfast
Records37All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical15CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Comfast records in CISA KEVNo Comfast vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records in Cf-xr11 Firmware · all components
TI-2023-20142 CVE-2023-38866 · GHSA-pgc3-2rm3-6fq4
COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function…
Priority HIGH 82
COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub_415588.
TI-2023-20141 CVE-2023-38865 · GHSA-29cr-mj24-pqgh
COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function…
Priority HIGH 82
COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub_4143F0.
TI-2023-20140 CVE-2023-38864 · GHSA-hfvw-6p69-w45c
An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the…
Priority HIGH 82
An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the protal_delete_picname parameter in the sub_41171C function at bin/webmgnt.
TI-2023-20139 CVE-2023-38863 · GHSA-3qw9-7wg6-qff3
An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the…
Priority HIGH 82
An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the ifname and mac parameters in the sub_410074 function at bin/webmgnt.
TI-2023-20138 CVE-2023-38862 · GHSA-wm2c-859g-3w93
An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the…
Priority HIGH 82
An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the destination parameter of sub_431F64 function in bin/webmgnt.
TI-2025-35499 CVE-2025-57293 · GHSA-6x44-8387-hrwg
A command injection vulnerability in COMFAST CF-XR11 (firmware V2.7.2) exists in the…
Priority HIGH 73
A command injection vulnerability in COMFAST CF-XR11 (firmware V2.7.2) exists in the multi_pppoe API, processed by the sub_423930 function in /usr/bin/webmgnt.