CVE-2024-9644

The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to an authentication bypass vulnerability in the administrative web server. Authentication is not enforced on some administrative functionality when using the "bapply.cgi" endpoint instead of the normal "apply.cgi" endpoint. A remote and unauthenticated can use this vulnerability to modify settings or chain with existing authenticated vulnerabilities.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://vulncheck.com/advisories/four-faith-hidden-api	Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:four-faith:f3x36_firmware:2.0:*:*:*:*:*:*:*

cpe:2.3:h:four-faith:f3x36:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2025-02-04 15:15

Updated : 2025-09-19 19:12

NVD link : CVE-2024-9644

Mitre link : CVE-2024-9644

CVE.ORG link : CVE-2024-9644

JSON object : View

Products Affected

four-faith

f3x36_firmware
f3x36

CWE

CWE-306

Missing Authentication for Critical Function

CWE-489

Active Debug Code

{"id": "CVE-2024-9644", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2025-02-04T15:15:19.273", "references": [{"url": "https://vulncheck.com/advisories/four-faith-hidden-api", "tags": ["Third Party Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-306"}, {"lang": "en", "value": "CWE-489"}]}, {"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to an \nauthentication bypass vulnerability in the administrative web server. Authentication is not enforced on some administrative functionality when using the \"bapply.cgi\" endpoint instead of the normal \"apply.cgi\" endpoint. A remote and unauthenticated can use this vulnerability to modify settings or chain with existing authenticated vulnerabilities."}, {"lang": "es", "value": "Four-Faith F3x36 router que utiliza el firmware v2.0.0 es vulnerable a una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n en el servidor web administrativo. La autenticaci\u00f3n no se aplica en algunas funciones administrativas cuando se utiliza \"bapply.cgi\" endpoint en lugar del \"apply.cgiendpointnt normal. Un usuario remoto y no autenticado puede utilizar esta vulnerabilidad para modificar la configuraci\u00f3n o encadenarla con vulnerabilidades autenticadas existentes."}], "lastModified": "2025-09-19T19:12:31.487", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:four-faith:f3x36_firmware:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4465943D-58C8-41A3-BA22-6A83B5D3FDCC"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:four-faith:f3x36:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0FFCC6F9-6DE1-4415-B0C5-729190BD0562"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "[email protected]"}