Is CVE-2024-54013 actively exploited?

No active exploitation of CVE-2024-54013 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2024-54013 be exploited remotely?

Partially. CVE-2024-54013 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2024-54013?

CVE-2024-54013 has a CVSS score of 8.7 (HIGH).

HOME VULNERABILITIESCVE-2024-54013

HIGH

CVE-2024-54013

CWE-306Published: April 28, 2026· Updated: Apr 28, 2026

8.7

CVSS v3.1

EPSS:0.02%probability of exploitation in 30 daysPercentile:5.0th

Official Description

Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, lead to unintended access to protected functions. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds

NVD Source

Technical Analysis

CVE-2024-54013 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorAdjacent

Attack ComplexityLow

Privileges Req.None

User InteractionNone

ScopeX

Impact

Confidentiality

Integrity

Availability

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X