CVE-2024-54006

HighRCE

Published: 07 January 2025

Published

07 January 2025

Modified

15 April 2026

KEV Added

—

Patch

—

CVSS Score v3.1 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Score 0.0089 75.9th percentile

Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-54006 is a high-severity Command Injection (CWE-77) vulnerability in Hpe (inferred from references). Its CVSS base score is 7.2 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 24.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).

Deeper analysis

CVE-2024-54006 involves multiple command injection vulnerabilities (CWE-77) in the web interface of the 501 Wireless Client Bridge. These flaws allow authenticated remote command execution, enabling attackers to run arbitrary commands as a privileged user on the underlying operating system. The vulnerability carries a CVSS v3.1 base score of 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), indicating high confidentiality, integrity, and availability impacts.

Exploitation requires network access and administrative authentication credentials on the affected host (PR:H). An attacker with valid admin privileges could leverage the web interface to inject malicious commands, achieving full remote code execution as a privileged user. This could lead to complete system compromise, including data exfiltration, persistence, or further lateral movement within the network.

The HPE security bulletin (hpesbnw04763en_us) provides details on the issue; practitioners should consult it for patch availability and mitigation guidance.

EU & UK References

🇪🇺 ENISA EUVD: EUVD-2024-52237

Vulnerability details

Multiple command injection vulnerabilities exist in the web interface of the 501 Wireless Client Bridge which could lead to authenticated remote command execution. Successful exploitation of these vulnerabilities result in the ability of an attacker to execute arbitrary commands as…

a privileged user on the underlying operating system. Exploitation requires administrative authentication credentials on the host system.

CWE(s): CWE-77

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access

Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.

attack.mitre.org →

T1059.004 Unix Shell Execution

Adversaries may abuse Unix shell commands and scripts for execution.

attack.mitre.org →

Why these techniques?

Command injection in web interface directly enables T1190 (Exploit Public-Facing Application) for authenticated RCE; resulting arbitrary command execution on the OS maps to T1059.004 (Unix Shell).

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1