CVE-2024-5421

2024-06-0408:15:11

CWE-78

[email protected]

web.nvd.nist.gov

cve-2024-5421

missing input validation

os command integration

utnserver pro

utnserver promax

inu-100

web-interface

authenticated

command injection

version 20.1.22

below

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.8%

JSON

Missing input validation and OS command integration of the input in the utnserver Pro, utnserver ProMAX, INU-100 web-interface allows authenticated command injection.This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below.