CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.1. Its EPSS score suggests a 26.3% probability of exploitation in the next 30 days.
CVE
CVE-2024-32937
Severity
HIGH
CVSS
8.1
EPSS
26.29%
Original NVD Description
An os command injection vulnerability exists in the CWMP SelfDefinedTimeZone functionality of Grandstream GXP2135 1.0.9.129, 1.0.11.74 and 1.0.11.79. A specially crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of malicious packets to trigger this vulnerability.
Related CVEs
Other vulnerabilities affecting the same vendor(s)