Beveiligingsadvies

CVE-2024-39148

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-01 00:00:00

Laatst bijgewerkt 2025-12-01 19:25:53

Toegewezen door mitre

CVSS-score 8.1

Status PUBLISHED

Beschrijving

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall.

← Alle CVE's bekijken Bekijk op cve.org ↗