High severity8.8NVD Advisory· Published Jul 24, 2024· Updated Jun 17, 2026

CVE-2024-31977

Description

Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via shell metacharacters to the Ping or Traceroute utility.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Adtran/834 5 Firmware
cpe:2.3:o:adtran:834-5_firmware:11.1.0.101-202106231430:*:*:*:*:*:*:*
Adtran/Sdg Smartos
cpe:2.3:o:adtran:sdg_smartos:*:*:*:*:*:*:*:*
Range: <12.5.5.1
Adtran/SRG 834-5cpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=11.1.0.101-202106231430

Patches

Vulnerability mechanics

References

github.com/actuator/cve/blob/main/AdTran/CVE-2024-31977nvdThird Party Advisory
drive.proton.me/urls/GXDM5T5NSGnvdPermissions Required
github.com/actuator/cve/tree/main/AdTran/834-5nvdBroken Link
supportcommunity.adtran.com/t5/Security-Advisories/ADTSA-2024001-Multiple-vulnerabilities-in-Service-Delivery-Gateway-products/ta-p/39332nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000