💣Exploit CVE-2024-9644 - Four-Faith F3x36 Router Authentication Bypass Vulnerability

[Mental_Outlaw]

CVE ID : CVE-2024-9644
Published : Feb. 4, 2025, 3:15 p.m. | 31 minutes ago
Description : The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to an authentication bypass vulnerability in the administrative web server. Authentication is not enforced on some administrative functionality when using the "bapply.cgi" endpoint instead of the normal "apply.cgi" endpoint. A remote and unauthenticated can use this vulnerability to modify settings or chain with existing authenticated vulnerabilities.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Reply if you wish me to write a poc tools of this exploit for you.