CVE-2024-7029

Summary

Commands can be injected over the network and executed without authentication.

Affected Software

Weaknesses

• CWE-77: CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-07
• https://www.akamai.com/blog/security-research/2024-corona-mirai-botnet-infects-zero-day-sirt

• ←Previous
• Next→