Wind River Support Network

HomeDefectsLIN1024-5332
Fixed

LIN1024-5332 : Security Advisory - wget - CVE-2024-10524

Created: Nov 11, 2024    Updated: Mar 23, 2025
Resolved Date: Mar 7, 2025
Found In Version: 10.24.33.1
Fix Version: 10.24.33.7
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Userspace

Description

Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.

https://nvd.nist.gov/vuln/detail/CVE-2024-10524

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube