{"id":10175,"date":"2024-12-19T10:43:38","date_gmt":"2024-12-19T16:43:38","guid":{"rendered":"https:\/?post_type=publicacion&#038;p=10175"},"modified":"2024-12-21T08:43:38","modified_gmt":"2024-12-21T14:43:38","slug":"alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143","status":"publish","type":"publicacion","link":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\/","title":{"rendered":"Alerta 2024-70 Vulnerabilidad Cr\u00edtica en OpenWrt &#8211; CVE-2024-54143"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Producto(s) afectado(s):&nbsp;<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Versi\u00f3n ASU de Openwrt: 920c8a1<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Descripci\u00f3n<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Se ha identificado una vulnerabilidad cr\u00edtica en la funci\u00f3n Attended Sysupgrade (ASU) de OpenWrt, que podr\u00eda permitir a atacantes distribuir firmware malicioso a trav\u00e9s de im\u00e1genes comprometidas. Esta falla, clasificada como&nbsp;<strong>CVE-2024-54143<\/strong>, tiene una puntuaci\u00f3n&nbsp;<strong>CVSS de 9.3<\/strong>&nbsp;y afecta directamente al servidor de actualizaci\u00f3n de sistema OpenWrt.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/github.com\/openwrt\/openwrt\" target=\"_blank\" rel=\"noreferrer noopener\">OpenWrt<\/a>&nbsp;es un popular sistema operativo basado en Linux de c\u00f3digo abierto para enrutadores, puertas de enlace residenciales y otros dispositivos integrados que enrutan el tr\u00e1fico de red.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>El problema de dicha vulnerabilidad radica en dos aspectos principales:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Inyecci\u00f3n de comandos en Imagebuilder<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Los nombres de paquetes proporcionados por los usuarios son incorporados en los comandos make sin una validaci\u00f3n adecuada. Esto permite que atacantes inyecten comandos arbitrarios durante el proceso de compilaci\u00f3n, generando im\u00e1genes de firmware maliciosas firmadas con claves leg\u00edtimas.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Colisiones en hashes SHA-256 truncados<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">El mecanismo de hash de solicitud utiliza solo los primeros 12 caracteres del hash SHA-256, reduciendo significativamente la entrop\u00eda. Esto facilita a los atacantes generar colisiones y reemplazar im\u00e1genes leg\u00edtimas con versiones maliciosas, comprometiendo la integridad del firmware.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Estas fallas, explotadas en conjunto, podr\u00edan permitir a atacantes distribuir firmware comprometido mediante el servicio Attended Sysupgrade, afectando la confiabilidad y seguridad de las compilaciones entregadas.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">No se necesita autenticaci\u00f3n para explotar estas vulnerabilidades. Aunque la probabilidad de que existan im\u00e1genes comprometidas es baja, los usuarios quedan expuestos al riesgo de instalar firmware malicioso.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Soluci\u00f3n<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Las vulnerabilidades identificadas han sido solucionadas mediante las siguientes confirmaciones en el repositorio oficial de OpenWrt:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>commit deadda8097d4 (\u00abbuild_request: seguridad: cr\u00edtico: corregir la validaci\u00f3n de entrada del usuario\u00bb)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/github.com\/openwrt\/asu\/commit\/deadda8097\">https:\/\/github.com\/openwrt\/asu\/commit\/deadda8097<\/a><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>commit d4c9e8b555ee (\u00abutil: seguridad: cr\u00edtico: usar longitud de hash completa\u00bb)<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/github.com\/openwrt\/asu\/commit\/d4c9e8b555\">https:\/\/github.com\/openwrt\/asu\/commit\/d4c9e8b555<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Puede encontrar las actualizaci\u00f3n de su firmware en el siguiente enlace:&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/firmware-selector.openwrt.org\">https:\/\/firmware-selector.openwrt.org<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Informaci\u00f3n adicional:<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/lists.openwrt.org\/pipermail\/openwrt-announce\/2024-December\/000062.html\">https:\/\/lists.openwrt.org\/pipermail\/openwrt-announce\/2024-December\/000062.html<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/thehackernews.com\/2024\/12\/critical-openwrt-vulnerability-exposes.html\">https:\/\/thehackernews.com\/2024\/12\/critical-openwrt-vulnerability-exposes.html<\/a><\/li>\n\n\n\n<li>https:\/\/flatt.tech\/research\/posts\/compromising-openwrt-supply-chain-sha256-collision\/<\/li>\n<\/ul>\n","protected":false},"featured_media":10178,"template":"","class_list":["post-10175","publicacion","type-publicacion","status-publish","has-post-thumbnail","hentry"],"acf":{"activar_pdf_link":true,"pdf":10176,"numero_de_boletin":"2024-70","traffic_light_protocol":"White"},"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.9 - aioseo.com -->\n\t<meta name=\"description\" content=\"Producto(s) afectado(s): Versi\u00f3n ASU de Openwrt: 920c8a1 Descripci\u00f3n Se ha identificado una vulnerabilidad cr\u00edtica en la funci\u00f3n Attended Sysupgrade (ASU) de OpenWrt, que podr\u00eda permitir a atacantes distribuir firmware malicioso a trav\u00e9s de im\u00e1genes comprometidas. Esta falla, clasificada como CVE-2024-54143, tiene una puntuaci\u00f3n CVSS de 9.3 y afecta directamente al servidor de actualizaci\u00f3n de sistema OpenWrt. OpenWrt es un\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.9\" \/>\n\t\t<meta property=\"og:locale\" content=\"es_ES\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Beacon Lab - CSIRT by Cybolt\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Alerta 2024-70 Vulnerabilidad Cr\u00edtica en OpenWrt \u2013 CVE-2024-54143 - Beacon Lab\" \/>\n\t\t<meta property=\"og:description\" content=\"Producto(s) afectado(s): Versi\u00f3n ASU de Openwrt: 920c8a1 Descripci\u00f3n Se ha identificado una vulnerabilidad cr\u00edtica en la funci\u00f3n Attended Sysupgrade (ASU) de OpenWrt, que podr\u00eda permitir a atacantes distribuir firmware malicioso a trav\u00e9s de im\u00e1genes comprometidas. Esta falla, clasificada como CVE-2024-54143, tiene una puntuaci\u00f3n CVSS de 9.3 y afecta directamente al servidor de actualizaci\u00f3n de sistema OpenWrt. OpenWrt es un\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/12\/images.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/12\/images.png\" \/>\n\t\t<meta property=\"og:image:width\" content=\"437\" \/>\n\t\t<meta property=\"og:image:height\" content=\"115\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-12-19T16:43:38+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-12-21T14:43:38+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@BeaconLabMX\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Alerta 2024-70 Vulnerabilidad Cr\u00edtica en OpenWrt \u2013 CVE-2024-54143 - Beacon Lab\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Producto(s) afectado(s): Versi\u00f3n ASU de Openwrt: 920c8a1 Descripci\u00f3n Se ha identificado una vulnerabilidad cr\u00edtica en la funci\u00f3n Attended Sysupgrade (ASU) de OpenWrt, que podr\u00eda permitir a atacantes distribuir firmware malicioso a trav\u00e9s de im\u00e1genes comprometidas. Esta falla, clasificada como CVE-2024-54143, tiene una puntuaci\u00f3n CVSS de 9.3 y afecta directamente al servidor de actualizaci\u00f3n de sistema OpenWrt. OpenWrt es un\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/12\/images.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\\\/#listItem\",\"name\":\"Alerta 2024-70 Vulnerabilidad Cr\\u00edtica en OpenWrt &#8211; CVE-2024-54143\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\\\/#listItem\",\"position\":2,\"name\":\"Alerta 2024-70 Vulnerabilidad Cr\\u00edtica en OpenWrt &#8211; CVE-2024-54143\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#listItem\",\"name\":\"Home\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#organization\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/\",\"telephone\":\"+528007374357\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.mx\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/BeaconLab_V2-03.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/twitter.com\\\/BeaconLabMX\",\"https:\\\/\\\/www.linkedin.com\\\/showcase\\\/beaconlabmx\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\\\/#webpage\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\\\/\",\"name\":\"Alerta 2024-70 Vulnerabilidad Cr\\u00edtica en OpenWrt \\u2013 CVE-2024-54143 - Beacon Lab\",\"description\":\"Producto(s) afectado(s): Versi\\u00f3n ASU de Openwrt: 920c8a1 Descripci\\u00f3n Se ha identificado una vulnerabilidad cr\\u00edtica en la funci\\u00f3n Attended Sysupgrade (ASU) de OpenWrt, que podr\\u00eda permitir a atacantes distribuir firmware malicioso a trav\\u00e9s de im\\u00e1genes comprometidas. Esta falla, clasificada como CVE-2024-54143, tiene una puntuaci\\u00f3n CVSS de 9.3 y afecta directamente al servidor de actualizaci\\u00f3n de sistema OpenWrt. OpenWrt es un\",\"inLanguage\":\"es-ES\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\\\/#breadcrumblist\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/wp-content\\\/uploads\\\/2024\\\/12\\\/images.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\\\/#mainImage\",\"width\":437,\"height\":115,\"caption\":\"OpenWrt logo\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\\\/#mainImage\"},\"datePublished\":\"2024-12-19T10:43:38-06:00\",\"dateModified\":\"2024-12-21T08:43:38-06:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#website\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"inLanguage\":\"es-ES\",\"publisher\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Alerta 2024-70 Vulnerabilidad Cr\u00edtica en OpenWrt \u2013 CVE-2024-54143 - Beacon Lab","description":"Producto(s) afectado(s): Versi\u00f3n ASU de Openwrt: 920c8a1 Descripci\u00f3n Se ha identificado una vulnerabilidad cr\u00edtica en la funci\u00f3n Attended Sysupgrade (ASU) de OpenWrt, que podr\u00eda permitir a atacantes distribuir firmware malicioso a trav\u00e9s de im\u00e1genes comprometidas. Esta falla, clasificada como CVE-2024-54143, tiene una puntuaci\u00f3n CVSS de 9.3 y afecta directamente al servidor de actualizaci\u00f3n de sistema OpenWrt. OpenWrt es un","canonical_url":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/es\/#listItem","position":1,"name":"Home","item":"https:\/\/beaconlab.us\/es\/","nextItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\/#listItem","name":"Alerta 2024-70 Vulnerabilidad Cr\u00edtica en OpenWrt &#8211; CVE-2024-54143"}},{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\/#listItem","position":2,"name":"Alerta 2024-70 Vulnerabilidad Cr\u00edtica en OpenWrt &#8211; CVE-2024-54143","previousItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/es\/#listItem","name":"Home"}}]},{"@type":"Organization","@id":"https:\/\/beaconlab.us\/es\/#organization","name":"Beacon Lab","description":"CSIRT by Cybolt","url":"https:\/\/beaconlab.us\/es\/","telephone":"+528007374357","logo":{"@type":"ImageObject","url":"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\/#organizationLogo"},"image":{"@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\/#organizationLogo"},"sameAs":["https:\/\/twitter.com\/BeaconLabMX","https:\/\/www.linkedin.com\/showcase\/beaconlabmx"]},{"@type":"WebPage","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\/#webpage","url":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\/","name":"Alerta 2024-70 Vulnerabilidad Cr\u00edtica en OpenWrt \u2013 CVE-2024-54143 - Beacon Lab","description":"Producto(s) afectado(s): Versi\u00f3n ASU de Openwrt: 920c8a1 Descripci\u00f3n Se ha identificado una vulnerabilidad cr\u00edtica en la funci\u00f3n Attended Sysupgrade (ASU) de OpenWrt, que podr\u00eda permitir a atacantes distribuir firmware malicioso a trav\u00e9s de im\u00e1genes comprometidas. Esta falla, clasificada como CVE-2024-54143, tiene una puntuaci\u00f3n CVSS de 9.3 y afecta directamente al servidor de actualizaci\u00f3n de sistema OpenWrt. OpenWrt es un","inLanguage":"es-ES","isPartOf":{"@id":"https:\/\/beaconlab.us\/es\/#website"},"breadcrumb":{"@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\/#breadcrumblist"},"image":{"@type":"ImageObject","url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/12\/images.png","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\/#mainImage","width":437,"height":115,"caption":"OpenWrt logo"},"primaryImageOfPage":{"@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\/#mainImage"},"datePublished":"2024-12-19T10:43:38-06:00","dateModified":"2024-12-21T08:43:38-06:00"},{"@type":"WebSite","@id":"https:\/\/beaconlab.us\/es\/#website","url":"https:\/\/beaconlab.us\/es\/","name":"Beacon Lab","description":"CSIRT by Cybolt","inLanguage":"es-ES","publisher":{"@id":"https:\/\/beaconlab.us\/es\/#organization"}}]},"og:locale":"es_ES","og:site_name":"Beacon Lab - CSIRT by Cybolt","og:type":"article","og:title":"Alerta 2024-70 Vulnerabilidad Cr\u00edtica en OpenWrt \u2013 CVE-2024-54143 - Beacon Lab","og:description":"Producto(s) afectado(s): Versi\u00f3n ASU de Openwrt: 920c8a1 Descripci\u00f3n Se ha identificado una vulnerabilidad cr\u00edtica en la funci\u00f3n Attended Sysupgrade (ASU) de OpenWrt, que podr\u00eda permitir a atacantes distribuir firmware malicioso a trav\u00e9s de im\u00e1genes comprometidas. Esta falla, clasificada como CVE-2024-54143, tiene una puntuaci\u00f3n CVSS de 9.3 y afecta directamente al servidor de actualizaci\u00f3n de sistema OpenWrt. OpenWrt es un","og:url":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\/","og:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/12\/images.png","og:image:secure_url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/12\/images.png","og:image:width":437,"og:image:height":115,"article:published_time":"2024-12-19T16:43:38+00:00","article:modified_time":"2024-12-21T14:43:38+00:00","twitter:card":"summary_large_image","twitter:site":"@BeaconLabMX","twitter:title":"Alerta 2024-70 Vulnerabilidad Cr\u00edtica en OpenWrt \u2013 CVE-2024-54143 - Beacon Lab","twitter:description":"Producto(s) afectado(s): Versi\u00f3n ASU de Openwrt: 920c8a1 Descripci\u00f3n Se ha identificado una vulnerabilidad cr\u00edtica en la funci\u00f3n Attended Sysupgrade (ASU) de OpenWrt, que podr\u00eda permitir a atacantes distribuir firmware malicioso a trav\u00e9s de im\u00e1genes comprometidas. Esta falla, clasificada como CVE-2024-54143, tiene una puntuaci\u00f3n CVSS de 9.3 y afecta directamente al servidor de actualizaci\u00f3n de sistema OpenWrt. OpenWrt es un","twitter:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2024\/12\/images.png"},"aioseo_meta_data":{"post_id":"10175","title":null,"description":null,"keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"WebPage","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2024-12-19 16:43:41","updated":"2025-09-24 06:30:44","seo_analyzer_scan_date":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/beaconlab.us\/es\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tAlerta 2024-70 Vulnerabilidad Cr\u00edtica en OpenWrt \u2013 CVE-2024-54143\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/beaconlab.us\/es\/"},{"label":"Alerta 2024-70 Vulnerabilidad Cr\u00edtica en OpenWrt &#8211; CVE-2024-54143","link":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2024-70-vulnerabilidad-critica-en-openwrt-cve-2024-54143\/"}],"_links":{"self":[{"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/publicacion\/10175","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/publicacion"}],"about":[{"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/types\/publicacion"}],"version-history":[{"count":1,"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/publicacion\/10175\/revisions"}],"predecessor-version":[{"id":10180,"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/publicacion\/10175\/revisions\/10180"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/media\/10178"}],"wp:attachment":[{"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/media?parent=10175"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}