Command Injection Vulnerability in Comtrend Router Affects GRG-4280us Version

CVE-2024-5785

What is CVE-2024-5785?

A command injection vulnerability has been identified in specific Comtrend router models, notably the WLD71-T1 and GRG-4280us. This flaw allows an authenticated user to execute arbitrary commands within the router’s operating system. The exploitation is facilitated via a crafted POST request targeting the administrative interface at ‘/boaform/admin/formUserTracert’. Such unauthorized execution of commands poses significant threats to network integrity and user security, warranting immediate attention and remediation.

References