CVE-2025-24348

MEDIUM Year: 2025
CVSS v3 Score
5.4
Medium
Weakness Type
CWE-1286
View all →

Vulnerability Description

A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the wireless network configuration file via a crafted HTTP request.

Related Vulnerabilities

CVE-2024-6763

MEDIUM
CVSS:5.3(Medium)

Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine . It includes a utility class, HttpURI, for URI/URL parsing. The HttpURI class does insufficient validation on...

CWE-12862024

CVE-2023-23903

MEDIUM
CVSS:4.9(Medium)

An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the correct file format. Every subsequent application request will return a...

CWE-12862023

CVE-2025-46419

MEDIUM
CVSS:5.9(Medium)

Westermo WeOS 5 through 5.23.0 allows a reboot via a malformed ESP packet.

CWE-12862025

CVE-2025-24345

MEDIUM
CVSS:6.3(Medium)

A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the “hosts” file in an unintended manner via a cra...

CWE-12862025

CVE-2022-22176

MEDIUM
CVSS:6.5(Medium)

An Improper Validation of Syntactic Correctness of Input vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos OS allows an adjacent unauthenticated attacker sending a malformed ...

CWE-12862022

CVE-2023-21405

MEDIUM
CVSS:6.5(Medium)

Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlighting that the OSDP message parser crashes the pacsiod proce...

CWE-12862023