VulnerabilityDeferred

CVE-2024-46658

Syrotech SY-GOPON-8OLT-L3 v1.6.0_240629 was discovered to contain an authenticated command injection vulnerability.

HIGH 8.0EPSS 24.4%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 24.4%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

Syrotech SY-GOPON-8OLT-L3 v1.6.0_240629 was discovered to contain an authenticated command injection vulnerability.

CVSS 3.1: 8.0 HIGHCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 24.36% probability · 98th percentile
CISA KEV: Not listed
Weakness: CWE-78
Source: cve@mitre.org

References

https://github.com/jackalkarlos/CVE-2024-46658/tree/main

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.