Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-5421

Authenticated Command Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CyberDanube

Description

Missing input validation and OS command integration of the input in the utnserver Pro, utnserver ProMAX, INU-100 web-interface allows authenticated command injection.This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SEH Computertechnik utnserver Pro

Default version status: unaffected

  • 0 to ≤ 20.1.22affected

SEH Computertechnik utnserver ProMAX

Default version status: unaffected

  • 0 to ≤ 20.1.22affected

SEH Computertechnik INU-100

Default version status: unaffected

  • 0 to ≤ 20.1.22affected

References