Authentication Bypass in Four-Faith F3x36 Router Firmware

CVE-2024-9644

What is CVE-2024-9644?

The Four-Faith F3x36 router with firmware version 2.0.0 is susceptible to a significant authentication bypass vulnerability affecting its administrative web server. This vulnerability arises from the improper handling of authentication mechanisms on the 'bapply.cgi' endpoint, which does not enforce necessary access controls as expected. As a result, a remote attacker can exploit this flaw to manipulate router settings without proper authentication, potentially compounding the risk by chaining it with other existing vulnerabilities. Immediate actions should be taken to secure router configurations and apply necessary updates to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References