Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-35304

System command injection through Netflow function

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
PandoraFMS

Description

System command injection through Netflow function due to improper input validation, allowing attackers to execute arbitrary system commands. This issue affects Pandora FMS: from 700 through <777.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pandora FMS Pandora FMS

Default version status: unaffected

  • 700 to < 777affected

References