Critical severity10.0NVD Advisory· Published Dec 30, 2025· Updated Jun 17, 2026
CVE-2024-58338
CVE-2024-58338
Description
Anevia Flamingo XL 3.2.9 contains a restricted shell vulnerability that allows remote attackers to escape the sandboxed environment through the traceroute command. Attackers can exploit the traceroute command to inject shell commands and gain full root access to the device by bypassing the restricted login environment.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:ateme:flamingo_xl_firmware:3.2.9:*:*:*:*:*:*:*
= 3.2.9+ 1 more
- (no CPE)range: = 3.2.9
- (no CPE)range: 3.2.9
Patches
Vulnerability mechanics
References
4- www.exploit-db.com/exploits/51516nvdExploitThird Party Advisory
- www.vulncheck.com/advisories/anevia-flamingo-xl-remote-root-jailbreak-via-traceroute-commandnvdThird Party Advisory
- www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5780.phpnvdThird Party Advisory
- www.ateme.comnvdProduct
News mentions
0No linked articles in our index yet.