Blog

Oct 26, 2024

Researchers Discover Command Injection Flaw in Wi-Fi Alliance’s Test Suite

Posted by in categories: internet, security

A security flaw impacting the Wi-Fi Test Suite could enable unauthenticated local attackers to execute arbitrary code with elevated privileges.

The CERT Coordination Center (CERT/CC) said the vulnerability, tracked as CVE-2024–41992, said the susceptible code from the Wi-Fi Alliance has been found deployed on Arcadyan FMIMG51AX000J routers.

“This flaw allows an unauthenticated local attacker to exploit the Wi-Fi Test Suite by sending specially crafted packets, enabling the execution of arbitrary commands with root privileges on the affected routers,” the CERT/CC said in an advisory released Wednesday.

Leave a reply