Vulnerabilities

TI-2024-02243 CVE-2024-2415 · GHSA-jcpj-8g57-23q8

OS command injection in Movistar Router Movistar 4G

LOW 37

Command injection vulnerability in Movistar 4G router affecting version ES_WLD71-T1_v2.0.201820.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00739 Published 2024-03-13 No fix listed CWE-78

TI-2024-02244 CVE-2024-2416 · GHSA-w94r-92m6-r43r

LOW 28

Cross-Site Request Forgery vulnerability in Movistar's 4G router affecting version ES_WLD71-T1_v2.0.201820.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00206 Published 2024-03-13 No fix listed CWE-352

TI-2024-02242 CVE-2024-2414 · GHSA-w959-v6jh-chch

MEDIUM 40

The primary channel is unprotected on Movistar 4G router affecting E version S_WLD71-T1_v2.0.201820.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0028 Published 2024-03-13 No fix listed CWE-419