Skip to content
NewA calmer, faster ZeroHour
Vulnerability2

CVE-2024-2389

CVSS 3.1
9.8 critical
EPSS
93%p100
Published
·
Modified
Analyze CVE-2024-2389 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified. An unauthenticated user can gain entry to the system via the Flowmon management interface, allowing for the execution of arbitrary system commands.

Vendors
progress
Products
flowmon
Weakness
CWE-78
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (93.0%)

In the news

2 stories