UDP Vulnerability Allows Unauthorized OS Command Execution

CVE-2024-45274

What is CVE-2024-45274?

An unauthenticated remote attacker can exploit a vulnerability in the XYZ Device from ABC Corp, allowing them to execute arbitrary operating system commands via UDP packets. This vulnerability stems from inadequate authentication measures within the device's networking functionalities, enabling unauthorized control and manipulation without requiring credentials. This situation poses significant risks to the integrity and confidentiality of the affected systems, emphasizing the need for prompt remediation.

References