Vulnerabilitycritical

PHP addressed critical RCE potentially impacting millions of servers

Security Affairsby @securityaffairsJun 9, 2024 · 13:27 UTC (Jun 9, 2024)2 min read7 · 5 reads

Read at securityaffairs.com

Analyze CVE-2024-4577 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-4577 CVE-2012-1823

Tags: cve-2024-4577 cve-2012-1823 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2012-1823	PHP-CGI Query String Parsing Flaw Enables Unauthenticated Remote Code Execution	—	100%	KEV	— KEV Mar 25, 2022
CVE-2024-4577	OS Command Injection in Windows PHP-CGI Allows Remote Code Execution	9.8	100%	KEVRansomwarePoC ×11	Jun 9, 2024 KEV Jun 12, 2024

From the original article

2 min read at securityaffairs.com

A new PHP for Windows remote code execution (RCE) flaw affects version 5. x and earlier versions, potentially impacting millions of servers worldwide. Researchers at cybersecurity firm DEVCORE discovered a critical remote code execution (RCE) vulnerability , tracked as CVE-2024-4577, in the PHP programming language.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.