CVE-2024-7578

CVE-2024-7578 is a critical improper authorization vulnerability affecting Alien Technology ALR-F800 devices running firmware up to version 19.10.24.00. An attacker can remotely exploit a flaw in the /var/www/cmd.php file by manipulating the 'cmd' argument. This allows for unauthorized access and potentially full compromise of the device, as indicated by its CVSS score of 9.8 (Critical). While there is no evidence of active exploitation in the wild (KEV), the exploit has been publicly disclosed, and there is significant community discussion surrounding it, suggesting a high likelihood of future exploitation.