← Vulnerability feed

Vulnerability record · CVE-2024-11657 · published 25 November 2024

CVE-2024-11657: Engeniustech enh1350ext firmware injection vulnerability

Engeniustech · Enh1350ext Firmware

A vulnerability, which was classified as critical, was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. Affected is an unknown function of the file /admin/network/diag_nslookup. The manipulation of the argument diag_nslookup leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

5.1 CVSS 4.0 Medium EPSS 29% · top 1.9% CWE-74 · InjectionCWE-77 · Command injection
5.1CVSS 4.0 base score, v2 5.8
29%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
4References, 1 tagged exploit
17 Jun 2026Last modified by NVD

Description

A vulnerability, which was classified as critical, was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. Affected is an unknown function of the file /admin/network/diag_nslookup. The manipulation of the argument diag_nslookup leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://k9u7kv33ub.feishu.cn/wiki/RURswTkepiuKCzkGMd2cA1M2nNc ExploitThird Party Advisory
https://vuldb.com/?ctiid.285978 Permissions RequiredVDB Entry
https://vuldb.com/?id.285978 Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.446640 Third Party AdvisoryVDB Entry

Track CVE-2024-11657 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

5.1CVE-2024-11659Engeniustech enh1350ext firmware injection vulnerabilityA vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Affected by this issue is some u…EPSS 29%5.1CVE-2024-11658Engeniustech enh1350ext firmware injection vulnerabilityA vulnerability has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118 and classified as critical. Affected by this vulnerabil…EPSS 29%5.1CVE-2024-11656Engeniustech enh1350ext firmware injection vulnerabilityA vulnerability, which was classified as critical, has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. This issue affects …EPSS 29%5.1CVE-2024-11655Engeniustech enh1350ext firmware injection vulnerabilityA vulnerability classified as critical was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. This vulnerability affects unknown c…EPSS 29%5.1CVE-2024-11653Engeniustech enh1350ext firmware injection vulnerabilityA vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. It has been rated as critical. Affected by this issue is so…EPSS 29%5.1CVE-2024-11654Engeniustech enh1350ext firmware injection vulnerabilityA vulnerability classified as critical has been found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. This affects an unknown part of…EPSS 29%5.1CVE-2024-11652Engeniustech enh1350ext firmware injection vulnerabilityA vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. It has been declared as critical. Affected by this vulnerab…EPSS 30%5.1CVE-2024-11651Engeniustech enh1350ext firmware injection vulnerabilityA vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. It has been classified as critical. Affected is an unknown …EPSS 27%

Source: NIST National Vulnerability Database (record CVE-2024-11657), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.