CVE-2024-21786: Mc-Technologies Mc Lr Router Firmware

High severity, CVSS 7.2. EPSS: 10.4% chance of exploitation in the next 30 days.

An OS command injection vulnerability exists in the web interface configuration upload functionality of MC Technologies MC LR Router 2.10.5. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Affected products

• Mc-Technologies Mc Lr Router Firmware: version 2.10.5 only

Published 2024-11-21. Last modified 2026-06-17.