CVE-2024-5421

CVSS V2 None CVSS V3 None

Description

Missing input validation and OS command integration of the input in the utnserver Pro, utnserver ProMAX, INU-100 web-interface allows authenticated command injection.This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below.

Overview

CVE ID
CVE-2024-5421

Assigner
CyberDanube

Vulnerability Status
PUBLISHED

Published Version
2024-06-04T07:58:50.389Z

Last Modified Date
2024-06-04T07:59:24.592Z

Weakness Enumerations

CWE	URL
CWE-78	http://cwe.mitre.org/data/definitions/78.html

References

Reference URL	Reference Tags
https://cyberdanube.com/en/en-multiple-vulnerabilities-in-seh-untserver-pro/index.html
http://seclists.org/fulldisclosure/2024/Jun/4

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-5421
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5421

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 03:19:47				Added to TrackCVE